Op 16-06-2022 om 16:58 schreef Darren Duncan: > THIS IS A DUPLICATE RESPONSE. I HAD PREVIOUSLY SENT THE SAME THING > UNDER AN ALTERED SUBJECT LINE. REPEATED TO KEEP IT TOGETHER WITH THE > MAIN THREAD. > > > I propose an alternate solution, summarized as bootstrapping. > > Perl bundles an implementation of HTTPS support including certs or > whatever, so there is zero dependency on any HTTPS library or files > being with the operating system. > Including certs is problematic, certs change over time. I assume we want a static tarball for any perl release, not one that changes over time. So I think this is not a feasable idea. You could include a long lived root cert and try to always use that on root cert, but I would not go that way. If you would like to use a different root cert later, you painted yourself in a corner. HTH, M4Thread Previous | Thread Next