c_rehash helped. Thanks a lot!

--
Regards,
Andriy Yurchuk
On Aug 28, 2013, at 4:01 PM, Kamil Dudka <kdudka_at_redhat.com> wrote:
> On Wednesday 28 August 2013 14:46:39 Andriy Yurchuk wrote:
>> This is the result of configure script run:
>> https://gist.github.com/Ch00k/6365585
>> 
>> oi_at_openindiana:~$ ~/curl7320/bin/curl --version
>> curl 7.32.0 (i386-pc-solaris2.11) libcurl/7.32.0 OpenSSL/0.9.8y zlib/1.2.3
>> Protocols: dict file ftp ftps gopher http https imap imaps ldap ldaps pop3
>> pop3s rtsp smtp smtps telnet tftp Features: IPv6 Largefile NTLM NTLM_WB
>> SSL libz
>> 
>> oi_at_openindiana:~$ ~/curl7320/bin/curl --capath /etc/certs/CA/
>> https://google.com curl: (60) SSL certificate problem: unable to get local
>> issuer certificate More details here:
>> http://curl.haxx.se/docs/sslcerts.html
>> 
>> curl performs SSL certificate verification by default, using a "bundle"
>> of Certificate Authority (CA) public keys (CA certs). If the default
>> bundle file isn't adequate, you can specify an alternate file
>> using the --cacert option.
>> If this HTTPS server uses a certificate signed by a CA represented in
>> the bundle, the certificate verification probably failed due to a
>> problem with the certificate (it might be expired, or the name might
>> not match the domain name in the URL).
>> If you'd like to turn off curl's verification of the certificate, use
>> the -k (or --insecure) option.
>> oi_at_openindiana:~$
>> 
>> Passing --capath does not help. I suspect this might be the OS specific
>> issue. I'll try to build on Linux too see if it reproduces there.
> 
> You seem to be using OpenSSL as the SSL backend.  Has your CA directory been 
> processed with the c_rehash utility as the curl.1 man page suggest?
> 
> Kamil
-------------------------------------------------------------------
List admin: http://cool.haxx.se/list/listinfo/curl-users
FAQ:        http://curl.haxx.se/docs/faq.html
Etiquette:  http://curl.haxx.se/mail/etiquette.html