> Maybe this is off-topic for this list. But maybe someone has used lua-curl and knows what to do.
One problem that I am aware of is that it uses OpenSSL for SSL/TLS communications, which is pretty standard these days at least where credentials are exchanged, and OpenSSL needs to have "trusted root authority" certificates to validate certificate trust chains that are involved in that. It does not have any built into it, and while the OpenSSL C-level API lets the user supply those in various forms, the Lua wrapper is less flexible. I think you can still provide a file system path to load them from, and you can disable that altogether, but the colleague who knows the gory details has called it a day.
Cheers,
V.
