Support on winhttp

[phoebusm]

Hello I am trying to incorporate trustme in the CA SSL verification testing in a opensourced project. Experience on Linux is good but run into error with winhttp:
Send request failed: The certificate authority is invalid or incorrect
I googled but could not find any evidence explicitly suggesting the trustm support on winhttp. So I wonder how is it?

[pquentin]

Hello! I'm not familiar with WinHTTP. If you figure out why it considers the CA is invalid, then we can fix it. The same way we fixed OpenSSL support on Windows by "only" using 3000 as the default expiry date:

trustme/src/trustme/__init__.py

Lines 33 to 38 in dd106e4

	# Default certificate expiry date:
	# OpenSSL on Windows fails if you try to give it a date after
	# ~3001-01-19:
	# https://github.com/pyca/cryptography/issues/3194
	DEFAULT_EXPIRY = datetime.datetime(3000, 1, 1)
	DEFAULT_NOT_BEFORE = datetime.datetime(2000, 1, 1)

[pquentin]

Closing for now as I have not heard back from you.