cURL / Mailing Lists / curl-users / Single Mail

curl-users

Re: SSL: certificate subject name does not match target host name

From: Daniel Stenberg <daniel-curl_at_haxx.se>
Date: Thu, 13 Oct 2005 23:47:22 +0200 (CEST)

On Thu, 13 Oct 2005, Chidanand Gangur wrote:

> When I try to acces my index page using curl I get the following error
> message. I do not want to use "-k" option. Does curl provide any other
> option which can over come this problem

> * SSL: certificate subject name 'TestServer' does not match target host name
> 'vml3chidanandg'

With the command line tool you cannot avoid this without using -k, as when I
added the option I thought that you mostly _either_ want to verify the cert or
you don't. Of course I could very well agree on adding an option that would
allow this.

In libcurl land however, you have the option to verify the cert part and skip
the host name vs CN checking part. Disable CURLOPT_SSL_VERIFYHOST and no CN or
other checks will be used against the host name.

-- 
  Commercial curl and libcurl Technical Support: http://haxx.se/curl.html
Received on 2005-10-13