On Fri, Apr 12, 2013 at 8:53 AM, Dima Tisnek <[email protected]> wrote: > On 11 April 2013 23:39, Daniel Stenberg <[email protected]> wrote: >> On Thu, 11 Apr 2013, Dima Tisnek wrote: >> >>> I'm trying to use curl with custom CA's only, but it seems server >>> certificate gets verified against system CA's too. >> >> >> I don't remember the exact details right now, but Apple has added some magic >> for certificate verification in their OpenSSL version. > > oh that makes sense, I did see TrustevaluationAgent get loaded right > after openssl. > I guess it's not a bug, but a feature then.... > > I'm not in a hurry to work around it on osx, perhaps it's enough to > document this behaviour.
Daniel discussed about Apple's OpenSSL patches on his blog back in 2011. http://daniel.haxx.se/blog/2011/11/05/apples-modified-ca-cert-handling-and-curl/ Thank you, Daniel. :-) Aside, Apple's OSS modifications are available as per-project tarballs here: http://opensource.apple.com/tarballs/ > ------------------------------------------------------------------- > List admin: http://cool.haxx.se/list/listinfo/curl-library > Etiquette: http://curl.haxx.se/mail/etiquette.html ------------------------------------------------------------------- List admin: http://cool.haxx.se/list/listinfo/curl-library Etiquette: http://curl.haxx.se/mail/etiquette.html
