Re: Native SSL for Android

2018-03-07 Thread Lessandro Mariano
We only do requests to a limited number of domains, so we use
CURLOPT_SSL_CTX_FUNCTION + mbedtls_ssl_conf_ca_chain to manually add
our certificates to each request. We just have to be careful to update
the app with enough notice time if we plan on changing the certificate
on the website.

--
Lessandro

On 7 March 2018 at 11:26, Daniel Stenberg  wrote:
> On Wed, 7 Mar 2018, Vincas Razma wrote:
>
>> Are you aware of any full/successful libCURL with SSL integrations into
>> Android apps?
>
>
> I know of numerous Android apps that say they use curl (in their license or
> about screens). Some of them are the absolutely highest volume apps that
> exist in the Android ecosystem.
>
> But I have no idea how they integrate curl into their products...
>
> --
>
>  / daniel.haxx.se
>
> ---
> Unsubscribe: https://cool.haxx.se/list/listinfo/curl-library
> Etiquette:   https://curl.haxx.se/mail/etiquette.html
---
Unsubscribe: https://cool.haxx.se/list/listinfo/curl-library
Etiquette:   https://curl.haxx.se/mail/etiquette.html

RE: Native SSL for Android

2018-03-07 Thread Daniel Stenberg

On Wed, 7 Mar 2018, Vincas Razma wrote:

Are you aware of any full/successful libCURL with SSL integrations into 
Android apps?


I know of numerous Android apps that say they use curl (in their license or 
about screens). Some of them are the absolutely highest volume apps that exist 
in the Android ecosystem.


But I have no idea how they integrate curl into their products...

--

 / daniel.haxx.se
---
Unsubscribe: https://cool.haxx.se/list/listinfo/curl-library
Etiquette:   https://curl.haxx.se/mail/etiquette.html

RE: Native SSL for Android

2018-03-07 Thread Vincas Razma
> As far as I know: no. I know they use BoringSSL somewhere in there but I'm 
> pretty sure Android doesn't offer those APIs generally for native 
> applications. > > Right?

That is my impression, yes. They suggest against linking to internal APIs. Are 
you aware of any full/successful libCURL with SSL integrations into Android 
apps?

---
Unsubscribe: https://cool.haxx.se/list/listinfo/curl-library
Etiquette:   https://curl.haxx.se/mail/etiquette.html

Re: Native SSL for Android

2018-03-06 Thread Daniel Stenberg

On Tue, 6 Mar 2018, Vincas Razma wrote:

Is there Android libCURL build alternative to OpenSSL and pem bundle file 
similar to those?


As far as I know: no. I know they use BoringSSL somewhere in there but I'm 
pretty sure Android doesn't offer those APIs generally for native 
applications. Right?


--

 / daniel.haxx.se
---
Unsubscribe: https://cool.haxx.se/list/listinfo/curl-library
Etiquette:   https://curl.haxx.se/mail/etiquette.html