-- Hoogle documentation, generated by Haddock
-- See Hoogle, http://www.haskell.org/hoogle/


-- | Use the system's native CA certificate store with HsOpenSSL
--   
--   A cross-platform library that tries to find a (reasonable) CA
--   certificate bundle that can be used with <tt>HsOpenSSL</tt> to verify
--   the certificates of remote peers.
--   
--   This package is for <tt>HsOpenSSL</tt> what <tt>x509-system</tt> is
--   for the <tt>tls</tt> package. Additionally, it borrows some ideas from
--   <tt>x509-system</tt>.
@package HsOpenSSL-x509-system
@version 0.1.0.3

module OpenSSL.X509.SystemStore

-- | Add the certificates from the system-wide certificate store to the
--   given <tt>openssl</tt> context. Note that <b>this does not
--   automatically enable peer certificate verification</b>. You also need
--   to call <a>contextSetVerificationMode</a> and <b>check manually if the
--   hostname matches</b> the one specified in the certificate. You can
--   find information about how to do the latter <a>here</a>.
contextLoadSystemCerts :: SSLContext -> IO ()
