SEC_ERROR_BAD_SIGNATURE

From: Vikram Darsi via curl-users <curl-users_at_cool.haxx.se>
Date: Wed, 24 Mar 2021 04:22:11 +0000

Hi Team

Please provide inputs on how to address the below issue

In my case, Client & Server communicates via secured channel. Certificate validations are enabled on both ends
Server sent its Certificate to Client (which is curl), curl validated the server certificate and has thrown below error

* NSS error -8182 (SEC_ERROR_BAD_SIGNATURE)
* Peer's certificate has an invalid signature.

Here is the curl command used:
curl --verbose -vvv -i --resolve advaoptical.com:9443:10.1.23.39 --cacert ca.cer --cert ./client.cer --key client.key -H "Accept: multipart/mixed" -H "Content-Type: application/json" -X POST -d '{"auth-token":"CA151" ,"sw-version":"20.1.1"}' https://advaoptical.com:9443/authserver/authorize

I have written a sample java program, to verify whether the server certificate is signed by this public-key, this test is passed.
python requests library also confirms that the certificate is valid

curl version used : curl 7.29.0 (x86_64-redhat-linux-gnu) libcurl/7.29.0 NSS/3.53.1 zlib/1.2.7 libidn/1.28 libssh2/1.8.0

Thanks in advance


Regards
Vikram

Please see our privacy statement at https://www.adva.com/en/about-us/legal/privacy-statement for details of how ADVA processes personal information.


-----------------------------------------------------------
Unsubscribe: https://cool.haxx.se/list/listinfo/curl-users
Etiquette: https://curl.haxx.se/mail/etiquette.html
Received on 2021-03-24