curl-users
Re: Digital Certificates
Date: Mon, 17 Jun 2002 12:28:47 -0400
I did the command (openssl pkcs12 -in PerfProdPrivate.pfx -out
PerfProdPrivate.pem) and created the pem file, but it is still failing.
F:\Tech\cURL>curl -v -o matcat -E PerfProdPrivate.pem
https://52.128.224.9/NASApp/dpcus01/B2BConnectorDPC?tgt=MatCatExtract
* About to connect() to 52.128.224.9:443
* Connected to 52.128.224.9 (52.128.224.9) port 443
* libcurl is now using a weak random seed!
Enter PEM pass phrase:
* Closing connection #0
curl: (35) SSL: error:14094416:SSL routines:SSL3_READ_BYTES:sslv3 alert
certificate unknown
Steve
www.perfectionsoftware.com
----- Original Message -----
From: "Cris Bailiff" <c.bailiff+curl_at_awayweb.com>
To: "Steven R. Shourds" <srs_at_perfectionsoftware.com>; "Curl Mailinglist"
<curl-users_at_lists.sourceforge.net>
Sent: Thursday, June 13, 2002 7:44 PM
Subject: Re: Digital Certificates
> >On Thu, 13 Jun 2002 07:22, Steven R. Shourds wrote:
> > I cannot seem to get curl to use my digital certificate that I exported.
> > The url is correct in the example below. I am just not showing all of
it.
> >
> > Example:
> >
> > curl -v -o matcat -E PerfProdPrivate.pfx https://52.128.224.9...
> > curl: (35) unable to set certificate file (wrong password?)
> >
> > What am I doing wrong?
>
> (I'm assuming you obtained your .pfx file from some Windows application,
such
> as IE or Lookout.) The .pfx format is not PEM format. It's basically
pkcs12
> format, with some embrace and extend on top.
>
> You can turn it into a PEM file containing the key and certificate chain
> using openssl:
>
> openssl pkcs12 -in PerfProdPrivate.pfx -out PerfProdPrivate.pem
>
> Add the flag '-nodes' if you don't want the PEM file to have a passphrase.
> You'll need the export password you supplied when you extracted the .pfx
file.
>
> Cris
>
>
> _______________________________________________________________
>
> Don't miss the 2002 Sprint PCS Application Developer's Conference
> August 25-28 in Las Vegas -
http://devcon.sprintpcs.com/adp/index.cfm?source=osdntextlink
>
>
_______________________________________________________________
Sponsored by:
ThinkGeek at http://www.ThinkGeek.com/
Received on 2002-06-17