mirror of
https://github.com/yhirose/cpp-httplib.git
synced 2026-06-10 16:47:14 +00:00
e7e7bf7b44
Since the TLS abstraction layer was introduced, SSLClient::set_ca_cert_store() handed the store to the TLS context without leaving any trace on the client. As a result: - load_certs() merged system CA certs into the user-provided store, silently broadening the trust set (a custom store used to suppress system CA loading) - Client::load_ca_cert_store() went through the native store path, bypassing the PEM retention used for redirect transfer, so CA certs were not carried over to clients created for HTTPS redirects - The Windows Schannel verification skip for custom CA certs did not trigger Track custom store assignment with a flag checked by load_certs() and the Schannel path, and route Client::load_ca_cert_store() through the PEM-based SSLClient path so the CA data survives redirects.
