mirror of
https://github.com/yhirose/cpp-httplib.git
synced 2026-10-03 05:53:10 +07:00
CryptoAPI got only the leaf, so it fetched an issuer from the leaf's AIA URL instead of using the intermediates the server sent. For accounts.spotify.com that issuer chains to Certainly Root R1, which Windows does not trust, while the server's own chain ends at Starfield Root G2. Add the server's intermediates to the store CryptoAPI builds the chain from. This covers the OpenSSL backend. Refs #2596