I suspect, with curl anyway, people may be seeing a cert verification
problem and then using -k to get around it, as if it were just an expired
cert. That was my first reaction, but then I checked the dates and the
issuer, and recompiled with OpenSSL, just to make sure... And anyway, I'd
expect Google not to drop the ball on that - a little mom'n'pop website
perhaps, not Google.

Ralph

On 8/22/05, Daniel Stenberg <daniel-curl_at_haxx.se> wrote:
>
> On Fri, 19 Aug 2005, Ralph Mitchell wrote:
>
> > Repeating the exact same compilation with openssl instead of gnutls
> gives me
> > this:
>
> There is defintely something wrong in the code that does CA cert
> verification
> of the server, since I just can't manage to get any known HTTPS server to
> verify with GnuTLS while they do with OpenSSL.
>
> I've posted questions/details to the GnuTLS list and I hope to sort this
> out
> soon.
>
> I guess this shows there just aren't very many people that use curl with
> GnuTLS...
>
> --
> Commercial curl and libcurl Technical Support: http://haxx.se/curl.html
>
Received on 2005-08-22