Hello!
 
Thanks for the tip, but it didn't work. It seems like the cURL library reads the client certificate, it's just that it doesn't send it over the wire.
Also, I need to specify that the cert.pem and wazuremgm.pem certificates I am using are the same.
 
Lucian
 


Date: Mon, 28 Feb 2011 16:02:26 +0800
Subject: Re: Faulty client certificate in PHP
From: me_at_lx.sg
To: curl-and-php_at_cool.haxx.se

You may want to try specifying an absolute path to your cert.
With regards,
Liu Shan Shui
http://lx.sg/
"Life would be much easier if I had the source code." - Anonymous



On Mon, Feb 28, 2011 at 8:22 AM, Lucian Daia <wildus1_at_hotmail.com> wrote:


Hello!
 
I've been trying for some time to connect to a Windows Azure account that requires a client certificate using PHP, but I keep getting SSL errno 10054, which basically means that the remote host rejected me. Here are some details I can provide:
 
1) The PHP Script I am using
 
curl_setopt($ch, CURLOPT_URL, $url);
curl_setopt($ch, CURLOPT_PORT , 443);
curl_setopt($ch, CURLOPT_HEADER, 1);
curl_setopt($ch, CURLOPT_VERBOSE, '1');
curl_setopt($ch, CURLOPT_HTTPHEADER, array('Host: management.core.windows.net', 'x-ms-version: 2010-04-01'));
curl_setopt($ch, CURLOPT_SSLCERT, 'cert.pem');
curl_setopt($ch, CURLOPT_CRLF, 1);
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false); // just on development
 
2) The curl command line script I am using:
 
curl -k -E wazuremgm.pem --Verbose -H "x-ms-version: 2010-04-01" https://management.core.windows.net/<subscription-id>/90/services/hostedservices
 
The funny thing is that the command line version works, while the PHP counter-part doesn't. I've added Fiddler to the mix to see exactly why it doesn't work and it seems that although both scripts send *exactly* the same data, the PHP version simply hangs when it's time to send the client certificate and the remote host decides to cut the communications channel after a while.
 
Just in case it's necessary, here are the cURL details for my PHP installation:
- version 7.21.2
- OpenSSL version 0.9.8l
- Zlib 1.2.3
- libSSH 2/1.2.7
 
And for the command-line tool:
- version 7.21.4
- OpenSSL version 0.9.8r
- Zlib 1.2.5
- libSSH 2/1.2.7
 
My operation system is Windows Vista and PHP version is 5.3.3 / 5.3.5 (doesn't work on any of them). The certificate was converted correctly and it's a .pem with both the certificate and private key segments in the same file. It's obviously not a certificate problem, since the command-line version works just fine with it.
 
If I can provide you with any more details, I'd be glad to!
 
Thanks,
Lucian

_______________________________________________
http://cool.haxx.se/cgi-bin/mailman/listinfo/curl-and-php



_______________________________________________ http://cool.haxx.se/cgi-bin/mailman/listinfo/curl-and-php

_______________________________________________
http://cool.haxx.se/cgi-bin/mailman/listinfo/curl-and-php
Received on 2011-02-28