How to disable certificate verification in BearSSL?

Question

C++ / C#

Is it possible to disable certificate verification in the BearSSL library?
Task context: there is a mapping application with support for raster tiles. Many tile servers use HTTPS. Decided to use BearSSL as an SSL library. There are very few examples. And as far as I understand, in order to communicate with the server, I need to add the root certificate corresponding to this server to the list (trusted anchors). Those. for each server you need to have your own root certificate, and up-to date, because they tend to expire. This is not how I imagined the work of an SLL client. Or am I not understanding something? In my application, the user should be able to add any tile source. How can I anticipate all options? Security is of little concern to me, I don’t understand why encrypt this kind of content at all.

Answer 1

Yes, everything works exactly as you described - either a set of periodically updated root certificates is used, whether it is the browser store, as in FF, is global for the OS (a package ca-certificatesin Linux is it), or some kind of application's own keystore; or we forget about checks and accept any certificate, even a self-signed one.
Judging by this ticket , there is no such possibility (yet).
Regarding "the ability to add any source of tiles", everything indicated in the first paragraph is true - either users use sources with valid certificates, or they will have to add them to the OS / application keystore by hand, or forget about encrypting connections, allowing everything in a row.

Answer 2

I don't care much about safety.

But she worries others. Although for those who do not care about it, of course it is necessary to provide for the "accept all certificates" mode.
Yes, for each server you need to have its publisher's certificate in the root store - that's why LE is so popular :) When establishing a connection, if the publisher's certificate cannot be verified - there is no trust, the certificate is not valid.