How to automatically download trusted root certificate authority

Question

There is a difference in behavior with the open-source curl.exe, and the curl.exe natively included in Windows.

When making a request with Windows native curl.exe, if a trusted root certificate authority such as one listed here is not found in the local store, the request will still succeed and the certificate will be downloaded and added to the local store (accessed with certlm.msc)

When making the same request with the open-source curl.exe, and it is using the native store (--ca-native), the request will FAIL if the root certificate authority is not already in there.

How do I replicate this Windows native curl.exe behavior?

Answer 1

@eric_s Hello!

Replicate this Windows native curl.exe behavior, what that means? Program it by its source code? I'm afraid you can't. You can just run and test it in like powershell.

You can download the different versions of curl.exe for windows: https://curl.se/windows/