curl / Mailing Lists / curl-users / Single Mail


Re: curl-users--insecure (Daniel Stenberg)

From: Alex Bligh via curl-users <>
Date: Thu, 24 Aug 2017 12:26:19 +0200

> On 23 Aug 2017, at 15:28, Daniel Stenberg <> wrote:
>> b) Take a leaf from ssh's book: add a simple mechanism for retrieving a server's certificate and adding it to a trust store.
> That's indeed an interesting idea! That's a long list of issues to deal with though, that are things that makes this much more complicated than the "easy" case ssh has with known hosts.

Even a --getcert flag which retrieves the cert, and a --manualcert flag which accepts that particular cert (or similar) would be helpful. I don't think that should be much harder than specifying ones own trust store to the SSL library.

Alex Bligh
Received on 2017-08-24