Then do I need to get the lattest ca-cert bundle / add the certificate
to the trusted store or bundle given by CURL.

I tried removing the -k(insecure) option from my script and the server
authentication failed.

Thanks and Regards,
 
Gowtam

-----Original Message-----
From: curl-users-bounces_at_cool.haxx.se
[mailto:curl-users-bounces_at_cool.haxx.se] On Behalf Of Daniel Stenberg
Sent: Tuesday, August 05, 2008 2:39 PM
To: the curl tool
Subject: Re: Unable to verify server certificate

On Tue, 5 Aug 2008, Salgar, Gowtam wrote:

> I need to connect to a secure website which is https based. I have to
> validate the certificate of the site before connecting.
>
> I trying opening the site, exporting the certificate from IE to .cer
format
> and then use openssl to convert it to .pem as CURL supports only ..pem

> format only.

That's not what you need or want to do. When you _verify_ a remote
certificate, you need a ca cert bundle not a copy of the server's
certificate.

-- 
  / daniel.haxx.se
-------------------------------------------------------------------
List admin: http://cool.haxx.se/cgi-bin/mailman/listinfo/curl-users
FAQ:        http://curl.haxx.se/docs/faq.html
Etiquette:  http://curl.haxx.se/mail/etiquette.html
-----------------------------------------
This message and any attachments are intended only for the use of
the addressee and may contain information that is privileged and
confidential. If the reader of the message is not the intended
recipient or an authorized representative of the intended
recipient, you are hereby notified that any dissemination of this
communication is strictly prohibited. If you have received this
communication in error, notify the sender immediately by return
email and delete the message and any attachments from your system.
-------------------------------------------------------------------
List admin: http://cool.haxx.se/cgi-bin/mailman/listinfo/curl-users
FAQ:        http://curl.haxx.se/docs/faq.html
Etiquette:  http://curl.haxx.se/mail/etiquette.html