Sorry about this message, i have already tested the certificate
validation with libcurl only, and it works. So i think this is a
problem in xmlrpc-c.
i will contact the xmlrpc-c-devel list for help.

Thanks any way.

On 9/25/07, Leonardo L. P. da Mata <barroca_at_gmail.com> wrote:
> Hello,
>
> i have looked for information about that in the net, but i couldn't
> find the answer.
>
> i'm trying to connect to https server running a xmlrpc application,
> but the certificate cannot be correct checked.
> the error is:
>
> Error: Curl failed to perform HTTP POST request. curl_easy_perform()
> says: SSL certificate problem, verify that the CA cert is OK. Details:
> error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate
> verify failed (-504)
>
> the source code of the application fails in
> die_if_fault_occurred(&env);. The env is filled with the error above.
>
> the source:
>
> char * xmlrpc(char * methodName, char * param1, char * param2 )
> {
> xmlrpc_value *response;
>
> xmlrpc_int returnvalue;
>
> struct xmlrpc_clientparms clientParms;
> struct xmlrpc_curl_xportparms curlParms;
>
> curlParms.cainfo = "/etc/apache2/ssl/demoCA/cacert.pem\0";
>
> curlParms.network_interface = "icpedu.lcc.ufmg.br";
> curlParms.no_ssl_verifypeer = 0;
> curlParms.no_ssl_verifyhost = 0;
> curlParms.user_agent = "mypw_app/1.0";
>
> clientParms.transport = "curl";
> clientParms.transportparmsP = (void*)&curlParms;
> clientParms.transportparm_size = XMLRPC_CXPSIZE(user_agent);
> /* SSL */
>
>
> xmlrpc_env env;
> xmlrpc_client * clientP ;
> xmlrpc_value * resultP ;
> char * sum;
> char * const url = "http://icpedu.lcc.ufmg.br:7080/RPC2";
> char * const url2 = "https://icpedu.lcc.ufmg.br:8668/RPC2";
>
> /* Initialize our error-handling environment. */
> xmlrpc_env_init(&env);
>
> xmlrpc_client_setup_global_const(&env);
>
> xmlrpc_client_create(&env, XMLRPC_CLIENT_NO_FLAGS, NAME, VERSION,
> &clientParms, XMLRPC_CPSIZE(transportparm_size), &clientP);
>
> char * param_format = "(ss)";
>
> /* Make the remote procedure call */
> xmlrpc_client_call2f(&env, clientP, url2, methodName, &resultP,
> param_format, param1, param2);
> die_if_fault_occurred(&env);
> ......
>
> }
> anyone knows what this error means? What can i do to correct that and use SSL?
>
> i do need to check if the server certficate is correct signed, so i
> cannot change this options: no_ssl_verifypeer no_ssl_verifyhost to
> 1 (true).
>
> thanks for the help.
> --
> Leonardo Luiz Padovani da Mata
> barroca_at_gmail.com
>
> "May the force be with you, always"
> "Nerd Pride... eu tenho. Voce tem?"
>

-- 
Leonardo Luiz Padovani da Mata
barroca_at_gmail.com
"May the force be with you, always"
"Nerd Pride... eu tenho. Voce tem?"