ca-bundle VS DCA

Again, strange attitude, given that he personally had legal issues with US in the past, the reasons for which were never disclosed[1].

Typical good developers are not Rambo. When law enforcers come to them and force them at gunpoint to make them commit/add a new maintainer, they should not expect active resistance. Minor reminder: curl is not just some http library, they maintain their own CA list[2]. They don't need any intricate hidden lines for backdoor, CA list is a backdoor on its own.

[1] https://daniel.haxx.se/us-visa.html

[2] https://curl.se/docs/caextract.html

Here are some examples from the ones on most Linux distros (Apple and Microsoft's lists are very similar):

Go to the cURL official site and download the latest cacert.pem file. It's linked near the top of this page: https://curl.se/docs/caextract.html

Haven't tried it myself but curl offers the certificate store used by Mozilla Firefox as a download.

I used the cacert.pem from https://curl.se/docs/caextract.html, as suggested by the NZBGet documentation. Is there a difference between these two cacert.pem files? Is one better than the other?

https://curl.se/docs/caextract.html and running update-ca-certificates

For anyone who's interested, here's the code for a Windows batch file to interact with all of the API functions for Postmarkapp's DMARC monitoring API (apologies, this will make the post a bit long). Prerequisites: cURL with a CA bundle:

If you think you're lacking in any of the areas: using https://github.com/Evalle/DCA which is based on official study guide is your friend. Read the docs, it helps.

I havent taken the DCA. Thought i did find this for it which appears to be a great resource: https://github.com/Evalle/DCA they have a lot of helpful info.