On Mon, Feb 21, 2022 at 10:40 AM Michael Stahl <m...@libreoffice.org> wrote:

> reads a trust database from the operating system, and do that centrally
> for the whole process?

Yes, that's how any distribution does it.. by hooking into whatever
the trust database is so
when the application calls SSL_CTX_set_default_verify_paths() it is
used from that point on.

It would be cool that OPENSSL_init_ssl() had a flag to do this lazily
by default  whenever is needed but atm that's not the case.
-- 
Unsubscribe: https://lists.haxx.se/listinfo/curl-library
Etiquette:   https://curl.haxx.se/mail/etiquette.html

Reply via email to