How can I use the same certificate as IE?

[jari@softmade.fi]

Hi

One of my customers asks:

We want to create a client program for a webservice that requires HTTPS (SSL).
Is there an option to use the same certificate store as for example Internet Explorer uses to validate the server certificate?
We would not like to use a separate root certificate file for validating the server certificate, because there is a risk that the server operator changes their certification authority and them we would have to manually update the certificate file.
If it would use the machine certificate store then it would be updated by the regular windows update routines.

Jari

[Bruce]

>> Is there an option to use the same certificate store as for example Internet Explorer uses to validate the server certificate?

no, the list of trusted ROOT CA's is in the CAROOT.PEM file. This is periodically updated (from the list used by Google Chrome). You can however use any list you like in here. (see http://www.capesoft.com/docs/NetTalk10/NetTalk.htm#DeployingAtlsClientOrServer)

cheers
Bruce