Tickets :: Comment on [#292] System default openssl certificates are not used

* Your Email Address
* Spam protection	Enter the letters below: _ _ ____ ____ _______ __ \| \| \| \| _ \ / __ \ / ____\ \ / / \| \| \| \| \|_) \| \| \| \| \| __ \ \ / / \| \| \| \| _ <\| \| \| \| \| \|_ \| \ \/ / \| \|__\| \| \|_) \| \|__\| \| \|__\| \| \ / \____/\|____/ \___\_\\_____\| \/
Comment	> If I don't specify a cacert directory or file, I expected the default > system ones to be used. This would require gloox to call int > SSL_CTX_set_default_verify_paths(SSL_CTX *ctx); but apparently it > doesn't. > > Is that intentional? It's a bit annoying because there is no way to > access the openssl context from outside gloox, so I can't use this > API in my client. As a result I can't connect to any server if I want > to rely on CertInfo.status to check validity of certificates, unless > I hardcode the path to the system cacerts.pem file. > > (btw, 1.0.24 is not available as a release to report bugs again in > the bugtracker)
Attachment
Watch this ticket