cURL / Mailing Lists / curl-users / Single Mail

curl-users

Re: curl usage with https

From: Ravi Malghan <rmalghan_at_yahoo.com>
Date: Wed, 3 May 2006 07:50:18 -0700 (PDT)

It looks like everything is going good with no errors.
But it still doesn't download the expected file.
Wondering if there is anything here that might point
me to the problem?

===================================
bash-2.05$ curl -k -v -d
"username=user1&password=pass1&Submit=Login"
"https://199.189.2.132/alerts/report/report-alert-99606.xml?attack_id=99606&output=xml"
* About to connect() to 199.189.2.132 port 443
* Trying 199.189.2.132... * connected
* Connected to 199.189.2.132 (199.189.2.132) port 443
* successfully set certificate verify locations:
* CAfile: /usr/local/share/curl/curl-ca-bundle.crt
  CApath: none
* SSL connection using RC4-MD5
* Server certificate:
* subject:
/C=US/ST=Virginia/L=Reston/O=Sprintlink/OU=MNS/CN=mns-res-collector1/emailAddress=rshirley_at_arbor.net
* start date: 2005-07-07 19:19:11 GMT
* expire date: 2015-07-05 19:19:11 GMT
* common name: mns-res-collector1 (does not
match '199.189.2.132')
* issuer: /C=US/ST=Michigan/L=Ann Arbor/O=Arbor
Networks/CN=Arbor Networks Certification Authority
* SSL certificate verify result: error number 1 (19),
continuing anyway.
> POST
/alerts/report/report-alert-99606.xml?attack_id=99606&output=xml
HTTP/1.1
User-Agent: curl/7.12.2 (sparc-sun-solaris2.9)
libcurl/7.12.2 OpenSSL/0.9.7f zlib/1.1.4
Host: 199.189.2.132
Pragma: no-cache
Accept: */*
Content-Length: 46
Content-Type: application/x-www-form-urlencoded

username=user1&password=pass1&Submit=Login< HTTP/1.1
302 Found
< Date: Wed, 03 May 2006 14:38:25 GMT
< Server: Apache/1.3.29
< P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR TAIa
OUR NOR UNI"
< X-Powered-By: PHP/4.3.3
< Set-Cookie:
PHPSESSID=f5ba0aaaa185a96e6eaa6622841929b1; path=/
< Set-Cookie:
PHPSESSID=646e1bd8920679150836ecb2fbcc3161; path=/
< Location: /
< Transfer-Encoding: chunked
< Content-Type: text/html
* Connection #0 to host 199.189.2.132 left intact
* Closing connection #0
=======================

--- Daniel Stenberg <daniel_at_haxx.se> wrote:

> On Wed, 3 May 2006, Ravi Malghan wrote:
>
> > openssl.exe s_client -connect A.B.C.D:443 |tee
> logfile
> >
> > But what I do with the logfile that was downloaded
> before I use it as a
> > certificate is not very clear. 1. do I just
> extract lines after BEGIN
> > CERTIFICATE and before END CERTIFICATE and save it
> as something like mycert.
> > An use --cacert mycert with curl?
>
> You most likely cannot use it stand-alone, you
> should append it to the
> existing cacert file and use that since there's a
> chain of trust and the
> cacert of the signer of that cert needs to be found
> too (if I've understood
> things right).
>
> --
> Commercial curl and libcurl Technical Support:
> http://haxx.se/curl.html
>

__________________________________________________
Do You Yahoo!?
Tired of spam? Yahoo! Mail has the best spam
protection around
http://mail.yahoo.com

__________________________________________________
Do You Yahoo!?
Tired of spam? Yahoo! Mail has the best spam protection around
http://mail.yahoo.com
Received on 2006-05-03