Re: Statically linked build of 0install

> If we had a reliable way to find the distribution's CA certificates, we
could
> even replace openssl with ocaml-tls and avoid all these C problems
entirely.
Getting rid of C dependencies sounds great to me. :)
Go's crypto/x509 package seems to use a list of hard-coded paths to search
for
CA certificates:
https://golang.org/src/crypto/x509/root_unix.go
https://golang.org/src/crypto/x509/root_linux.go
Maybe this could be the way to go?

> Another option is to drop support for older Linux versions and just build
> against libcurl4 now.
Deciding between libcurl3 and libcurl4 seems difficult at this point in
time,
since most "mature" distros (e.g., Debian Stable, latest Ubuntu LTS) have
only
libcurl3 while many "popular" distros (e.g., latest Ubuntu) have only
libcurl4.