Re: How to restrict the set of CAs? (HTTPS_CA_FILE, HTTPS_CA_DIR)

On 1 Feb 2010, at 16:34, Stanisław T. Findeisen wrote:

> Dirk-Willem van Gulik wrote:
> > On 1 Feb 2010, at 14:54, Stanisław T. Findeisen wrote:
> >
> >> HTTPS_CA_FILE ...
> >
> > If I recall correctly (and this may be a few years out of date) - this only works if you are relying on Net::SSL as the underlying SSL library. It aint work with IO::Socket::SSL.
> 
> Good. How to use it? I thought "use LWP::UserAgent;" does the job? : http://search.cpan.org/~dland/Crypt-SSLeay-0.57/SSLeay.pm

They bubble up through there; though the latter supports SSL_ca_file and SSL_ca_path. 

I think that the structure under the covers is
	Crypt::SSLeay
	    Net::SSL
or
	Net::SSLeay
	    Net::SSLeay::Handle
	    IO::Socket::SSL
	        Net::Server::Proto::SSL

But I'll leave the proper perl heads to reply :)

Dw.