On Mon, 22 Aug 2005, Ralph Mitchell wrote:

> I suspect, with curl anyway, people may be seeing a cert verification
> problem and then using -k to get around it, as if it were just an expired
> cert. That was my first reaction, but then I checked the dates and the
> issuer, and recompiled with OpenSSL, just to make sure... And anyway, I'd
> expect Google not to drop the ball on that - a little mom'n'pop website
> perhaps, not Google.

Yes, and I figure I myself have been in that category of people when I added
this code...

Anyway, with help from the friendly GnuTLS dudes and some source code browsing
I found the problem and addressed it in a commit I did just minutes ago.

Thanks!

-- 
  Commercial curl and libcurl Technical Support: http://haxx.se/curl.html