Yes, I did this，without ca boundle

> [...]
> > SSL_CTX_load_verify_locations why consume 20ms every time? Openssl read
> > /etc/pki/tls/certs/ca-bundle.crt once time, I don't change this file, why
> > Openssl not cache this?
>
> As a workaround, you can set CURLOPT_CAINFO to point to a single
> certificate,
> (possibly just a dummy certificate) and use a hashed certificate
> directory (created
> by e.g. c_rehash) to manager your actual trust store, and point
> CURLOPT_CAPATH
> to it.
>
> rainer
> -------------------------------------------------------------------
> Unsubscribe: https://cool.haxx.se/list/listinfo/curl-library
> Etiquette: https://curl.haxx.se/mail/etiquette.html

-------------------------------------------------------------------
Unsubscribe: https://cool.haxx.se/list/listinfo/curl-library
Etiquette: https://curl.haxx.se/mail/etiquette.html
Received on 2017-08-18