cURL / Mailing Lists / curl-users / Single Mail

curl-users

Problem with CA cert using FTP/SSL

From: Jan Theofel <theofel_at_etes.de>
Date: Fri, 14 May 2004 14:16:24 +0200

Hello,

I have a problem using cURL on an FTP Server (secured with SSL). Here's
my call and the output:

--- snip ---
tux:/tmp # curl -v --ftp-ssl --ftp-pasv --disable-epsv -T testfile2 -u USER:PASS ftp://FQDN/
* About to connect() to FQDN port 21
* Connected to FQDN (FQDN) port 21
< 220 Serv-U FTP Server v4.0 for WinSock ready...
> AUTH SSL
< 234 AUTH command OK. Initializing SSL connection.
* successfully set certificate verify locations:
* CAfile: /usr/local/share/curl/curl-ca-bundle.crt
  CApath: none
* SSL certificate problem, verify that the CA cert is OK
* Closing connection #0
curl: (60) SSL certificate problem, verify that the CA cert is OK

More details here: http://curl.haxx.se/docs/sslcerts.html

[...]
--- snap ---

Using the "--insecure" option everything ist fine, but I don't like that
for obvious reasons. ;-)

The server certificate is signed by Verisign, so I downloaded their CA
here: https://www.verisign.com/support/site/caReplacement.html

Using this CA I get the following output:

--- snip ---
tux:/tmp # curl -v --cacert ~/verisign.crt --ftp-ssl --ftp-pasv -T testfile2 -u USER:PASS ftp://FQDN/
* About to connect() to FQDN port 21
* Connected to FQDN (FQDN) port 21
< 220 Serv-U FTP Server v4.0 for WinSock ready...
> AUTH SSL
< 234 AUTH command OK. Initializing SSL connection.
* successfully set certificate verify locations:
* CAfile: /data/tmp/verisign.crt
  CApath: none
* SSL certificate problem, verify that the CA cert is OK
* Closing connection #0
curl: (60) SSL certificate problem, verify that the CA cert is OK
--- snap ---

Can someone please tell me what's wrong here?

Thanks in advance,
Jan Theofel

-- 
Jan Theofel                              Fon:  +49 (7 11) 48 90 83 - 0
ETES - EDV-Systemhaus GbR                Fax:  +49 (7 11) 48 90 83 - 50
Libanonstrasse 58 A * D-70184 Stuttgart  Web: http://www.etes.de
Received on 2004-05-14