On Thu, 31 Aug 2006, Mark Ripley wrote:

> Thank you - I did exactly as that page suggested, appending the key starting
> with BEGIN and ending with END to cacert.pem in [democa] I get the same
> error, but this command openssl s_client -connect will connect to the
> address that cURL won't without --insecure

But "openssl s_client -connect" does the equivalent of curl --insecure, iirc,
so there's no surprise there.

> I've also tried curl --cert to point at the key with no success.

Well, there's no other magic tricks. Now you have debugging left, and figuring
out why OpenSLL doesn't think that cert is enough. I would assume that you're
good not enough with just that CA cert, but that you need more certs from a
trust chain.

Did you try with the extracted mozilla ca cert bundle?

-- 
  Commercial curl and libcurl Technical Support: http://haxx.se/curl.html