I get the same error (on Gentoo Linux, curl-7.10.3). However, by using the -k
option, to initiate an insecure connection, I do get a reasonable result:

    curl -v -i -s -S -k https://www1.columbia.edu/

returns

* Establish HTTP proxy tunnel to www1.columbia.edu:443
* Proxy replied to CONNECT request
* SSL connection using DES-CBC3-SHA
* Server certificate:
* subject: /C=US/ST=New York/O=Columbia
University/OU=AcIS/CN=www1.columbia.edu/Email=webmaster_at_columbia.edu
* start date: 2002-04-18 18:37:24 GMT
* expire date: 2003-04-18 18:37:24 GMT
* common name: www1.columbia.edu (matched)
* issuer: /C=US/ST=New York/O=Columbia University in the City of New York

along with a "302 Moved Temporarily" and a Location header that redirects to:

     http://www.columbia.edu/index.html

My first wild-assed guess would be that Columbia rolled their own certificate, so
the certificate chain doesn't check out. Dunno if that "asn encoding" error is
normal, though...

Versions of curl prior to 7.10 were not so picky about the certs (I think).

Ralph Mitchell

"SourceForge.net" wrote:

> Bugs item #703459, was opened at 2003-03-14 02:27
> You can respond by visiting:
> https://sourceforge.net/tracker/?func=detail&atid=100976&aid=703459&group_id=976
>
> Category: https
> Group: crash
> Status: Open
> Resolution: None
> Priority: 5
> Submitted By: Russell Yanofsky (rey4)
> Assigned to: Daniel Stenberg (bagder)
> Summary: 7.10 versions of curl and libcurl crash with on one server
>
> Initial Comment:
> Hi,
>
> Recent versions of curl and libcurl have been crashing
> for me whenever I try to connect to one particular https
> server, but working just fine for all others.
>
> The error message that comes up is "curl: (35) SSL:
> error:0D0EE007:asn1 encoding
> routines:d2i_AUTHORITY_KEYID:expecting an asn1
> sequence"
>
> To reproduce just type
>
> curl https://www1.columbia.edu/
>
> I've tested this with multiple versions of cURL on different
> platforms. The problem seems to affect all 7.10 versions
> of curl and libcurl, but not earlier versions.
>
> Here is the list of versions I've tried that crash:
>
> curl 7.10.3 (i386-pc-linux-gnu) libcurl/7.10.3
> OpenSSL/0.9.6i ipv6 zlib/1.1.4
> curl 7.10.2 (i686-pc-cygwin) libcurl/7.10.2
> OpenSSL/0.9.6i zlib/1.1.4
> curl 7.10.3 (win32) libcurl/7.10.3 OpenSSL/0.9.6g
> curl 7.10 (win32) libcurl/7.10 OpenSSL/0.9.6g
>
> Here are the versions that connect successfully:
>
> curl 7.9.8 (win32) libcurl 7.9.8 (OpenSSL 0.9.6g)
> curl 7.9.1 (win32) libcurl 7.9.1 (OpenSSL 0.9.6b)
>
> I'd be happy to provide more information or help debug.
> Let me know if there's anything I can do.
>
> ----------------------------------------------------------------------
>
> You can respond by visiting:
> https://sourceforge.net/tracker/?func=detail&atid=100976&aid=703459&group_id=976
>
> -------------------------------------------------------
> This SF.net email is sponsored by:Crypto Challenge is now open!
> Get cracking and register here for some mind boggling fun and
> the chance of winning an Apple iPod:
> http://ads.sourceforge.net/cgi-bin/redirect.pl?thaw0031en

-------------------------------------------------------
This SF.net email is sponsored by:Crypto Challenge is now open!
Get cracking and register here for some mind boggling fun and
the chance of winning an Apple iPod:
http://ads.sourceforge.net/cgi-bin/redirect.pl?thaw0031en
Received on 2003-03-14