Tectu / malloy

A cross-platform C++20 library providing embeddable server & client components for HTTP and WebSocket.
BSD 3-Clause "New" or "Revised" License
68 stars 8 forks source link

Consider using Botan for host certificate store access #129

Open Tectu opened 6 months ago

Tectu commented 6 months ago

Currently, we're using certify for accessing the host's certificate store. It might be worth considering using Botan instead (https://github.com/randombit/botan).

reneme commented 6 months ago

Perhaps, you could even consider using Botan as your (alternative) TLS provider, which then includes certificate validation with its system certificate store adapters, of course. I see you're using asio's ssl_stream that uses OpenSSL underneath. Botan provides a "more-or-less" drop in replacement for this. 🙂

Tectu commented 6 months ago

That's a good suggestion - Thanks for pointing that out!

Ideally we'd make this options so users can pick one or the other.