Forums Bug Reports 7.74 without cacert.pem

Hello, westor just reported that 7.74 without cacert.pem set in option will now make all SSL requests fail. This will occur for user who currently don't have cacert.pem file set in thrusted auth option and update to 7.74. Is this change intentional?

Thanks for your bug report. It looks like this is due to Item 9 in versions.txt, the fix for the OpenSSL v3.x slow-down issue.

The issue in the latest version is that, if cacert.pem is not loaded, it is not using the Windows certificate store as a default. Since mIRC installs cacert.pem by default, this should only affect users who have manually removed/disabled cacert.pem for some reason.

The main reason why cacert.pem was originally added to mIRC was that the Windows certificate store, many years ago, was not including all of the certificates that cacert.pem included.

However, since some users create custom certificates that are only stored in the Windows certificate store, mIRC should load that as well.

This issue has been fixed and a beta will be released soon for testing.

I'm having the same issue now on v7.74, hope this can be fixed as soon as possible, thanks.

If you set the cacert.pem file as your trusted authorities file in the Options SSL dialog, does that resolve your issue?

Oh, yes. it helped. Now it works as expected.

Everything works fine here, can't reproduce that issue. I am loading OpenSSL 3.1.2 externally (released 2 days ago), I guess mIRC loads 3.x not just 3.0.x which is good to know.