Uploaded image for project: 'C++ Couchbase Client'
  1. C++ Couchbase Client
  2. CXXCBC-327

Bundle certificates from Mozilla with the library and expose switch to include them automatically

    XMLWordPrintable

Details

    • Improvement
    • Resolution: Fixed
    • Major
    • 1.0.0-dp.5
    • None
    • library

    Description

      On some platforms (Windows and MacOS) it might be challenging to access recent list of global root certificates, so to streamline default user experience many projects choose to bundle Mozilla certificates in one way or another. C++SDK uses OpenSSL directly, and does not try to discover root CAs from the wrapper's runtime or using OS means (like Windows certificates store), so one of the options would be embed and load certificates, and projects like https://curl.se/docs/caextract.html and https://mkcert.org allow to simplify process.

      During the library build, we fetch the current bundle, record metadata (checksum and date), and embed certificates into the C++SDK to load later. Also it is possible to disable bundled certificates with "disable_mozilla_ca_certificates" option.

      Attachments

        For Gerrit Dashboard: CXXCBC-327
        # Subject Branch Project Status CR V

        Activity

          People

            avsej Sergey Avseyev
            avsej Sergey Avseyev
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Gerrit Reviews

                There are no open Gerrit changes