On Mon, Feb 21, 2022 at 10:40 AM Michael Stahl <m...@libreoffice.org> wrote:
> reads a trust database from the operating system, and do that centrally > for the whole process? Yes, that's how any distribution does it.. by hooking into whatever the trust database is so when the application calls SSL_CTX_set_default_verify_paths() it is used from that point on. It would be cool that OPENSSL_init_ssl() had a flag to do this lazily by default whenever is needed but atm that's not the case. -- Unsubscribe: https://lists.haxx.se/listinfo/curl-library Etiquette: https://curl.haxx.se/mail/etiquette.html