cURL / Mailing Lists / curl-users / Single Mail

curl-users

Problem w/ self-signed cert.

From: Michael T. Davis <DAVISM_at_ecr6.ohio-state.edu>
Date: Thu, 05 Apr 2007 20:55:21 -0400 (EDT)

        I referenced the sslcerts doc. for details. (BTW, the IE instructions
would appear to be horribly outdated.) I couldn't make heads or tails out of
the IE-based instructions (since they don't seem to apply for IE v6 or v7),
so I downloaded OpenSSL for Windows and used the OpenSSL instructions. I
specified...

               openssl s_client -connect server:443 > server.txt

...for my local system named "server". I excluded all the content in
server.txt except the text surrounded (and including) the "BEGIN/END
CERTIFICATE" markers and saved that to server.crt, then used...

         openssl x509 -inform PEM -in server.crt -text -out server.pem

The OpenSSL instructions don't actually say which file to use with the curl
tool. I tried them both using "--cacert server.crt" and "....pem" with the
same results:

%CURL-E-SSL_CACERT, SSL CACERT, problem with the CA cert (path?)

(I'm running cURL under OpenVMS v8.2.) FWIW, the server's cert. is
self-signed, but it was my impression that the sslcerts doc. was supposed to
address this. Please advise.

Thanks,
Mike

-- 
         Michael T. Davis  (Mike)        |    Systems Specialist: CBE,MSE
    E-mail: davism_at_ecr6.ohio-state.edu   | Departmental Networking/Computing
           -or- DAVISM+@osu.edu          |     The Ohio State University
 http://www.ecr6.ohio-state.edu/~davism/ |     197 Watts, (614) 292-6928
Received on 2007-04-06