Verify HTTPS with an explicit private CA

Prepare the native host

Start the matching TLS service at https://localhost:8443. Put its trusted server.pem in the client working directory. Private CA replaces system trust and never disables verification.

Follow the deployment guide for certificates, CA selection, working directories and the complete upstream workflow.

Follow the HTTP guide and API reference. Keep the original filenames and the modules of the selected source variant. Save Arabic and English variants in separate directories. TLS inputs are supplied by the reader, with no bundled certificates or keys. No other data assets are required.

Arabic source

استورد طلبات.لبات بسم طلبات.
دالة ابدأ_الرئيسية() -> ص64 { أرجع طلبات::جرب("https://localhost:8443", صواب). }

{
  "native": {
    "check": 0,
    "status": 0,
    "output": "checked text, JSON, 00 FF 41, and 404"
  }
}

English source

import requests.aspl as requests;
fn start_main() -> i64 { return requests::exercise("https://localhost:8443", true); }

{
  "native": {
    "check": 0,
    "status": 0,
    "output": "checked text, JSON, 00 FF 41, and 404"
  }
}

Commands and outcomes

ar:

aspl check ar/client-tls.لبات
aspl run ar/client-tls.لبات
aspl build -o http-client-tls-ar-program ar/client-tls.لبات
./http-client-tls-ar-program

en:

aspl check en/client-tls.لبات
aspl run en/client-tls.لبات
aspl build -o http-client-tls-en-program en/client-tls.لبات
./http-client-tls-en-program

Run these commands from the parent of the separate ar/en source directories. With the matching TLS service and private CA ready, the client checks every response, prints the catalog output without a trailing newline and exits with 0. Expected outcome details above come from the catalog. See the HTTP collection.