How to get libcurl to properly validate https cert

[sorunome]

Heya, soru wondered how to get libcurl to properly validate https certs? currently she can only make requests with the CURLOPT_SSL_VERIFYPEER set to 0 which kinda defeats the point of ssl. Thank you for help!

 

[sorunome]

So, after having done some research: the libcurl port for 3ds does not come with its own root certs bundled, making verification a bit harder. So, instead soru grabbed the root cert she needed (in her case, let's encrypt), and put it into romfs. Then, she just had to configure libcurl to use this cert:

curl_easy_setopt(curl, CURLOPT_CAINFO, "romfs:/certs.pem");