Open Tectu opened 6 months ago
Perhaps, you could even consider using Botan as your (alternative) TLS provider, which then includes certificate validation with its system certificate store adapters, of course. I see you're using asio's ssl_stream that uses OpenSSL underneath. Botan provides a "more-or-less" drop in replacement for this. 🙂
That's a good suggestion - Thanks for pointing that out!
Ideally we'd make this options so users can pick one or the other.
Currently, we're using
certify
for accessing the host's certificate store. It might be worth considering usingBotan
instead (https://github.com/randombit/botan).