Hi curler & Daniel,

the attachment is my download cacert.pem.
Is it right?

2016-12-13 20:11 GMT+08:00 杨俊 <yangjun9772_at_gmail.com>:

> Hi Daniel,
>
> My cross compiled command for the openssl and libcurl like this:
> ----------------------for openssl----------------------------------
>
> #export CROSSCOMP_DIR=/home/georgeyang/workspace/hisi/
> hi3516a_v100/Hi3516A_SDK_V1.0.6.0/osdrv/opensource/
> toolchain/arm-hisiv400-linux/arm-hisiv400-linux/bin
>
> #export INSTALL_DIR=/home/georgeyang/workspace/speech_code/openssl
>
> #./Configure -DOPENSSL_NO_HEARTBEATS linux-generic32 shared
> --prefix=$INSTALL_DIR --openssldir=$INSTALL_DIR/openssl/final
> --cross-compile-prefix=$CROSSCOMP_DIR/arm-hisiv400-linux-gnueabi-
>
> #Make
>
> #Make install
>
>
> ---------------for libcurl------------------------
>
> #export INSTALL_DIR=/home/georgeyang/workspace/speech_code/curl
>
> #export CPPFLAGS="-I/home/georgeyang/workspace/speech_code/openssl/include
> -I/home/georgeyang/workspace/speech_code/nghttp2/include"
>
> #export LDFLAGS="-L/home/georgeyang/workspace/speech_code/openssl/lib
> -L/home/georgeyang/workspace/speech_code/nghttp2/lib"
>
> #export LIBS="-lssl -lcrypto -lnghttp2"
>
> #./configure --prefix=$INSTALL_DIR --host=arm-hisiv400-linux-gnueabi
> --with-ssl --with-nghttp2=/home/georgeyang/workspace/speech_code/nghttp2
>
> #make
>
> #make install
>
> ------------------------------------------------------------
> -----------------------------------------
>
> Then I just move the curl command tool and some libs to the embedded
> platform.
>
> And download the cacert.pem.
>
> Just these things.
>
> Is my configured parameter right?
>
> Or did I forget to move somethings to the platform?
>
>
> And at the end, I will program with libcurl to visit some https webs.
>
> Would my program have the same issue like this? >"<
>
>
> Thx
>
> 2016-12-13 18:39 GMT+08:00 Daniel Stenberg <daniel_at_haxx.se>:
>
>> On Tue, 13 Dec 2016, 杨俊 wrote:
>>
>> I'm sorry I don't know what SNI is. >"<
>>> Could you tell me more details?
>>>
>>
>> SNI is what TLS uses to tell the server which actual virtual host it
>> speaks to.
>>
>> So you got the cert for the default site on the machine and not for
>>> curl.haxx.se Is this meaning I got the cacert.pem from the website, but
>>> the machine actually didn't use it?
>>>
>>
>> It means that your openssl command line was wrong and didn't do any good
>> in proving anything.
>>
>> Could you teach me how to fix this problem?
>>>
>>
>> I don't know why you have this problem.
>>
>> --
>>
>> / daniel.haxx.se
>> -------------------------------------------------------------------
>> List admin: https://cool.haxx.se/list/listinfo/curl-users
>> FAQ: https://curl.haxx.se/docs/faq.html
>> Etiquette: https://curl.haxx.se/mail/etiquette.html
>>
>>
>

-------------------------------------------------------------------
List admin: https://cool.haxx.se/list/listinfo/curl-users
FAQ: https://curl.haxx.se/docs/faq.html
Etiquette: https://curl.haxx.se/mail/etiquette.html