curl / Mailing Lists / curl-library / Single Mail
Buy commercial curl support from WolfSSL. We help you work out your issues, debug your libcurl applications, use the API, port to new platforms, add new features and more. With a team lead by the curl founder himself.

Re: How to handle CA certificate bundles in portable application bundles (e.g., AppImages)?

From: Daniel Stenberg via curl-library <curl-library_at_lists.haxx.se>
Date: Thu, 2 Jun 2022 09:44:27 +0200 (CEST)

On Thu, 2 Jun 2022, TheAssassin via curl-library wrote:

> One thing that would be nice to have as well is to compile in the value used
> in CURL_CA_BUNDLE_AUTODETECT and expose it via the API as well.

> This would allow applications to benefit from the list without having to
> maintain it themselves.

You mean the list of paths in SEARCH_CA_BUNDLE_PATHS (in CMakeLists.txt) ?

I'm not at all convinced it is libcurl's job to do that. I think it's one
thing to try to find the default CA bundle when you build curl, it's a
completely differerent thing to provide a (what will be perceived as)
"blessed" list to users indicating that this is a complete or even a good way
to go about this search.

-- 
  / daniel.haxx.se
  | Commercial curl support up to 24x7 is available!
  | Private help, bug fixes, support, ports, new features
  | https://curl.se/support.html
-- 
Unsubscribe: https://lists.haxx.se/listinfo/curl-library
Etiquette:   https://curl.haxx.se/mail/etiquette.html
Received on 2022-06-02