On Thu, 16 Oct 2003, Georg Horn wrote:

> And adding the cert gives me an ssl-error:
>
> $ curl-7.10.7/src/curl -v -k --cert mgb2003.pem
> https://www2.postbank-banking.de/xmlapi/OB

[snip]

> * SSL read error: 1
> * Connection #0 left intact
> curl: (56) SSL read error: 1
> * Closing connection #0
>
> I think here we have a problem/bug?

It certainly appears to be a bug, I agree. I'm afraid I don't have any useful
work-around or shortcuts but to fire up the debugger and run the command line
using it and single-step through lib/sendf.c:Curl_read() to figure how exactly
how and why this fails.

> And adding --cacert instead of -k again results in:

> * SSL certificate problem, verify that the CA cert is OK
> curl: (60) SSL certificate problem, verify that the CA cert is OK

This is SSL_connect() returning failure... (see
lib/ssluse.c:Curl_SSLConnect()) I don't see why though, as the openssl tool
worked... What if you force it to talk sslv3?

-- 
 Daniel Stenberg -- curl: been grokking URLs since 1998
-------------------------------------------------------
This SF.net email is sponsored by: SF.net Giveback Program.
SourceForge.net hosts over 70,000 Open Source Projects.
See the people who have HELPED US provide better services:
Click here: http://sourceforge.net/supporters.php