Re: Dealing with certificates when using custom OpenSSL build with curl

2019-03-23 Thread Andreas Falkenhahn via curl-library
On 22.03.2019 at 19:34 Ray Satiro via curl-library wrote: > Doesn't android have /system/etc/security/cacerts and will that work as > capath instead of using the bundle as cainfo? Ok, after Luca's mail I tried it and it's indeed possible to access /system/etc/security/cacerts and read all the ce

Re: Dealing with certificates when using custom OpenSSL build with curl

2019-03-22 Thread Andreas Falkenhahn via curl-library
On 22.03.2019 at 19:34 Ray Satiro via curl-library wrote: > Doesn't android have /system/etc/security/cacerts and will that work as > capath instead of using the bundle as cainfo? I don't think that NDK apps are allowed to access that file, even if it existed... -- Best regards, Andreas Falke

Re: Dealing with certificates when using custom OpenSSL build with curl

2019-03-22 Thread Ray Satiro via curl-library
On 3/22/2019 10:12 AM, Andreas Falkenhahn via curl-library wrote: > When I use curl with the system's default SSL stack (e.g. DarwinSSL on macOS, > Schannel on Windows, pre-installed OpenSSL on Linux) I don't have to use > CURLOPT_CAINFO to tell curl which certificates to use at all. Instead, cur

Re: Dealing with certificates when using custom OpenSSL build with curl

2019-03-22 Thread Patrick Monnerat via curl-library
On 3/22/19 3:12 PM, Andreas Falkenhahn via curl-library wrote: When I use curl with the system's default SSL stack (e.g. DarwinSSL on macOS, Schannel on Windows, pre-installed OpenSSL on Linux) I don't have to use CURLOPT_CAINFO to tell curl which certificates to use at all. Instead, curl wil

Dealing with certificates when using custom OpenSSL build with curl

2019-03-22 Thread Andreas Falkenhahn via curl-library
When I use curl with the system's default SSL stack (e.g. DarwinSSL on macOS, Schannel on Windows, pre-installed OpenSSL on Linux) I don't have to use CURLOPT_CAINFO to tell curl which certificates to use at all. Instead, curl will automatically use the certificates provided by the host operatin