cURL / Mailing Lists / curl-library / Single Mail

curl-library

Re: Regarding libcurl dependency on ca-certificates

From: Daniel Stenberg <daniel_at_haxx.se>
Date: Tue, 5 Aug 2008 23:24:02 +0200 (CEST)

On Tue, 5 Aug 2008, Scoped Ptr wrote:

> I am using libcurl for SSL communication with OpenSSL. Since libcurl uses
> ca-certificates for peer certificate verification. I want to know whether
> libcurl depends on ca-certificate or the user needs to install it manually
> to get SSL support?

libcurl can be told to not use a ca-certificate bundle, or it can use one. It
does use one by default. Which one it defaults to (the path for it) is decided
at compile-time, but the path can always be set by the application using
libcurl.

You decide what cacert bundle to use. curl doesn't include any ca-certificates
in its release archives since a while back, but it used to ship a set of
terribly outdated ones.

libcurl will of coruse require a ca certificate bundle to do secure SSL
connections.

I hope this answers the question.

-- 
  / daniel.haxx.se
Received on 2008-08-05