On Unix, we can use X509_STORE_set_default_paths(store)
to load root certificates provided by the system
But on Windows, its certificates aren't provided as a file.
So it should be required another way.
Following is a concept code (use Crypt32.dll):
#include WinCrypt.h
/*
else could have a look at / comment on it (in particular someone
who's
Correcting myself (to keep English grammar straight):
s/who's/whose/, actually
I'll look into this in more detail later, however on the face of it
there's a conflict with draft-ietf-tls-rfc4366-bis-06.txt
specifically:
try this
#include WinCrypt.h
static void ossl_x509store_add_certs_win(X509_STORE *store)
{
HCERTSTORE hStore;
PCCERT_CONTEXT pContext = NULL;
X509 *x509;
hStore = CertOpenSystemStore(0, "ROOT");
if(!hStore)
return;
while (pContext = CertEnumCertificatesInStore(hStore, pContext))
{
