certifi / gocertifi

(Go Distribution) A carefully curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts.
http://certifi.io
Mozilla Public License 2.0
207 stars 27 forks source link

use system cert pool, if we can #9

Closed Ak-Army closed 7 years ago

Ak-Army commented 7 years ago

Use system cert pool if we can...

Lukasa commented 7 years ago

Thanks for this! I don't think it's a good idea though: if people want to use the system cert pool, they can without any help from certifi, and we definitely shouldn't go around shoving certs into it for no reason.

Thanks for the proposal though!

Ak-Army commented 7 years ago

In this way we just amend the system certs, but ok, its ur decision

Lukasa commented 7 years ago

Amending the system certs shouldn't be necessary: the system should already contain basically the equivalent of this set of roots.