curl / Mailing Lists / curl-library / Single Mail
Buy commercial curl support. We help you work out your issues, debug your libcurl applications, use the API, port to new platforms, add new features and more. With a team lead by the curl founder Daniel himself.

Re: LibreOffice uses SChannel and SecureTransport, please don't remove them

From: Daniel Stenberg via curl-library <curl-library_at_lists.haxx.se>
Date: Wed, 15 Jan 2025 08:26:27 +0100 (CET)

On Tue, 14 Jan 2025, Ilmari Lauhakangas via curl-library wrote:

> The main advantage is that users can use the OS UI to add self-signed
> certificates and then presumably they work automatically with LibreOffice.
> At the moment we don't know, if this could be pulled off with OpenSSL as
> well.

Forgive me, but this just says you use SecureTransport today and you don't
even know if you can switch over to OpenSSL without losing functionality.
That's a pretty weak argument if you ask me.

But I can help you out and say that OpenSSL does not natively support
accessing the Apple OSes native certificate store. There needs to be code
added for this. We can add that code in the backend code in curl, but someone
needs to do it.

wolfSSL is a TLS library that already has this support built-in [1].

[1] =
https://www.wolfssl.com/wolfssl-extends-support-for-system-ca-certificates-to-apple-devices/

-- 
  / daniel.haxx.se || https://rock-solid.curl.dev
-- 
Unsubscribe: https://lists.haxx.se/mailman/listinfo/curl-library
Etiquette:   https://curl.se/mail/etiquette.html
Received on 2025-01-15