curl-users
Problem with CA cert using FTP/SSL
Date: Fri, 14 May 2004 14:16:24 +0200
Hello,
I have a problem using cURL on an FTP Server (secured with SSL). Here's
my call and the output:
--- snip ---
tux:/tmp # curl -v --ftp-ssl --ftp-pasv --disable-epsv -T testfile2 -u USER:PASS ftp://FQDN/
* About to connect() to FQDN port 21
* Connected to FQDN (FQDN) port 21
< 220 Serv-U FTP Server v4.0 for WinSock ready...
> AUTH SSL
< 234 AUTH command OK. Initializing SSL connection.
* successfully set certificate verify locations:
* CAfile: /usr/local/share/curl/curl-ca-bundle.crt
CApath: none
* SSL certificate problem, verify that the CA cert is OK
* Closing connection #0
curl: (60) SSL certificate problem, verify that the CA cert is OK
More details here: http://curl.haxx.se/docs/sslcerts.html
[...]
--- snap ---
Using the "--insecure" option everything ist fine, but I don't like that
for obvious reasons. ;-)
The server certificate is signed by Verisign, so I downloaded their CA
here: https://www.verisign.com/support/site/caReplacement.html
Using this CA I get the following output:
--- snip ---
tux:/tmp # curl -v --cacert ~/verisign.crt --ftp-ssl --ftp-pasv -T testfile2 -u USER:PASS ftp://FQDN/
* About to connect() to FQDN port 21
* Connected to FQDN (FQDN) port 21
< 220 Serv-U FTP Server v4.0 for WinSock ready...
> AUTH SSL
< 234 AUTH command OK. Initializing SSL connection.
* successfully set certificate verify locations:
* CAfile: /data/tmp/verisign.crt
CApath: none
* SSL certificate problem, verify that the CA cert is OK
* Closing connection #0
curl: (60) SSL certificate problem, verify that the CA cert is OK
--- snap ---
Can someone please tell me what's wrong here?
Thanks in advance,
Jan Theofel
-- Jan Theofel Fon: +49 (7 11) 48 90 83 - 0 ETES - EDV-Systemhaus GbR Fax: +49 (7 11) 48 90 83 - 50 Libanonstrasse 58 A * D-70184 Stuttgart Web: http://www.etes.deReceived on 2004-05-14