On Fri, Sep 7, 2018 at 11:55 PM Juan Isoza <jis...@gmail.com> wrote: > > It's a good idea using openssl under windows (with new openssl 1.1.1, we > will be able to use TLS 1.3 under Windows, from 7/2008 to 10/2016) instead > internal windows crypto.. > > But, by example, curl build for windows with openssl need a --insecure > parameters or a custom root certificate file. > > What about using the Windows certificate store ? > Loading the windows cert store isn't very hard....
https://github.com/d3x0r/SACK/blob/master/src/netlib/ssl_layer.c#L1037 But checking; I Guess that's just the code from that stack overflow. basically verbatim. > > I found info at > > https://stackoverflow.com/questions/9507184/can-openssl-on-windows-use-the-system-certificate-store/15451831 > https://stackoverflow.com/questions/9507184/can-openssl-on-windows-use-the-system-certificate-store/15451831 > > > There is some code in openssl (in engines\e_capi.c) which deal with > Windows certificate store, but this seem not solve the problem > -- > openssl-users mailing list > To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users >
-- openssl-users mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users