Hi Daniel,

I'm newbie in this.
I'm sorry I don't know what SNI is. >"<
Could you tell me more details?
>So you got the cert for the default site on the machine and not for
curl.haxx.se
Is this meaning I got the cacert.pem from the website, but the machine
actually didn't use it?

Could you teach me how to fix this problem?

Thank you

2016-12-13 17:19 GMT+08:00 Daniel Stenberg <daniel_at_haxx.se>:

> On Tue, 13 Dec 2016, 杨俊 wrote:
>
> /tmp # ./openssl s_client -connect curl.haxx.se:443 -CApath
>> /etc/ssl/certs/
>> CONNECTED(00000003)
>> depth=0 CN = anja.haxx.se
>> verify error:num=20:unable to get local issuer certificate
>>
>
> That's not using SNI right? So you got the cert for the default site on
> the machine and not for curl.haxx.se
>
> --
>
> / daniel.haxx.se
> -------------------------------------------------------------------
> List admin: https://cool.haxx.se/list/listinfo/curl-users
> FAQ: https://curl.haxx.se/docs/faq.html
> Etiquette: https://curl.haxx.se/mail/etiquette.html
>
>

-------------------------------------------------------------------
List admin: https://cool.haxx.se/list/listinfo/curl-users
FAQ: https://curl.haxx.se/docs/faq.html
Etiquette: https://curl.haxx.se/mail/etiquette.html
Received on 2016-12-13