cURL / Mailing Lists / curl-library / Single Mail

curl-library

Re: certificate verification against system cert (?) when custom CAINFO is set

From: Dima Tisnek <dimaqq_at_gmail.com>
Date: Fri, 12 Apr 2013 09:53:06 +0300

On 11 April 2013 23:39, Daniel Stenberg <daniel_at_haxx.se> wrote:
> On Thu, 11 Apr 2013, Dima Tisnek wrote:
>
>> I'm trying to use curl with custom CA's only, but it seems server
>> certificate gets verified against system CA's too.
>
>
> I don't remember the exact details right now, but Apple has added some magic
> for certificate verification in their OpenSSL version.

oh that makes sense, I did see TrustevaluationAgent get loaded right
after openssl.
I guess it's not a bug, but a feature then....

I'm not in a hurry to work around it on osx, perhaps it's enough to
document this behaviour.
-------------------------------------------------------------------
List admin: http://cool.haxx.se/list/listinfo/curl-library
Etiquette: http://curl.haxx.se/mail/etiquette.html
Received on 2013-04-12