I've downloaded the mozilla cert bundle as advised hereabouts, and
appended to it two certs I got from UPS (test & live).

I then use
$ curl --header "Content-Type: multipart/mixed; boundary=BOUNDARY"
--capath sslcerts: --cacert cacert.pem --data-binary @'p1'
"https://www.pld-certify.ups.com/hapld/tos/kdwhapltos"

%CURL-E-SSL_CACERT, SSL CACERT, problem with the CA cert (path?)

and it doesn't seem to work - trace dialog below (using --insecure to
bypass the problem).

Second problem is that 'p1' is a stream (crlf) file - I've tried --data,
--data-ascii, and --data-binary, and they all strip out all the carriage
return/line feeds, causing the lines to run together with no separators.

(workaround for that is to use vms$ set file/attr=rfm=udf 'p1')

Any better way to correct/workaround these issues (particularly
--insecure) ?

Thanks
Chris

17:50:10.855472 == Info: About to connect() to www.pld-certify.ups.com
port 443
17:50:10.901368 == Info: Trying 153.2.245.88... 17:50:11.065420 ==
Info: connected
17:50:11.065420 == Info: Connected to www.pld-certify.ups.com
(153.2.245.88) port 443
17:50:11.072255 == Info: error setting certificate verify locations,
continuing anyway:
17:50:11.072255 == Info: CAfile: cacert.pem
   CApath: sslcerts:
17:50:12.209175 == Info: SSL connection using RC4-SHA
17:50:12.209175 == Info: Server certificate:
17:50:12.209175 == Info: subject: /C=US/ST=New
Jersey/L=Mahwah/O=United Parcel
Service/OU=INET_EWS_certtool_pldcertify/CN=www.pld-certify.ups.com
17:50:12.210151 == Info: start date: 2010-03-19 00:00:00 GMT
17:50:12.210151 == Info: expire date: 2012-04-08 23:59:59 GMT
17:50:12.210151 == Info: common name: www.pld-certify.ups.com
(matched)
17:50:12.210151 == Info: issuer: /C=US/O=VeriSign,
Inc./OU=VeriSign Trust Network/OU=Terms of use at
https://www.verisign.com/rpa (c)09/CN=VeriSign Class 3 Secure Server CA - G2
17:50:12.210151 == Info: SSL certificate verify result: error number 1
(20), continuing anyway.
17:50:12.210151 => Send header, 247 bytes (0xf7)

-------------------------------------------------------------------
List admin: http://cool.haxx.se/list/listinfo/curl-users
FAQ: http://curl.haxx.se/docs/faq.html
Etiquette: http://curl.haxx.se/mail/etiquette.html
Received on 2011-03-08