21 ms·
cURL doesn't provide a CA bundle any more [1], it's the job of your OS to provide this. As I understand it, all tools that provide SSL support will fail safe if
by halfasleep 13y ago
cURL doesn't provide a CA bundle any more [1], it's the job of your OS to provide this. As I understand it, all tools that provide SSL support will fail safe if there are no root CAs on your system.
[1] http://curl.haxx.se/docs/sslcerts.html http://curl.haxx.se/docs/sslcerts.html
- LukeShu 13y agoThough, to be fair: $ pacman -Qi ca-certificates | grep 'Required By' Required By : ca-certificates-java curl glib-networking neon qca qt4 Note that curl is on that list but wget isn't.
- 0xbadcafebee 13y agoPacman lists ca-certificates as an optional requirement of wget: https://www.archlinux.org/packages/extra/x86_64/wget/ https://www.archlinux.org/packages/extra/x86_64/wget/ But the point halfasleep is making is important: Don't assume either wget or curl will validate your SSL connection because it may not have been set up by your OS/distribution.
- somesay 13y agoI wasn't that wrong then. ;)
- stock_toaster 13y agoThey do still provide a bundle[1] though, for cases where you need it (eg homebrew's curl-ca-bundle package). [1]: http://curl.haxx.se/docs/caextract.html