On 21 Feb 2014, at 14:22, John Nisbet wrote:

> " I think what OP is saying is that the host has now updated its server side
> certificates (perhaps using CA signed ones rather than self-signed ones), so
> he now wants to avoid using -k and verify the certificates properly. For
> this, he needs a CA cert bundle installed.
>
> This is normally the set of public keys of certificate authorities and
> versions of curl with Linux distributions tend to come with those installed
> or easily installable. I believe he's asking how to do that on HP-UX, which
> will I think depend on how he (or
> HP) built curl."
>
> This is exactly correct. The curl installation in question is the base
> provided by HP. We need to eliminate the need for the '-k' parameter.

I don't know what capath is built into curl on HP-UX (using 'strings'
on the binary might tell you), but the "--capath" option will allow
you to specify one.

-- 
Alex Bligh
-------------------------------------------------------------------
List admin: http://cool.haxx.se/list/listinfo/curl-users
FAQ:        http://curl.haxx.se/docs/faq.html
Etiquette:  http://curl.haxx.se/mail/etiquette.html