cURL / Mailing Lists / curl-library / Single Mail

curl-library

Re: pycurl & SSL

From: Daniel Stenberg <daniel_at_haxx.se>
Date: Fri, 24 Jan 2003 13:15:17 +0100 (CET)

On Thu, 23 Jan 2003, Michael McFarland wrote:

> I'm also trying to get pycurl 7.10 working w/ https (on redhat 7.3).
> After upgrading from 7.9 of each, https URLs were giving the "certificate
> verify failed" error. Now, after reading the SSLCERTS document, I'm
> setting 'pycurl.SSL_VERIFYPEER' to 0, accessing "https://slashdot.org"
> produces the following erro:
>
> pycurl.error: (51, "SSL: certificate subject name '*.slashdot.org' does not
> match target host name 'slashdot.org'")
>
> It seems like even w/ VERIFYPEER disabled, curl 7.10 places more
> restrictions on what makes a valid SSL certificate. Am I right on this?
> Is there any way to make curl 7.10 be as forgiving w/ SSL certificates as
> 7.9 was?

1. You can disable that check using CURLOPT_SSL_VERIFYHOST.

2. libcurl 7.10.3 has been tought how to understand wildcard names in
   certificates, such as this.

-- 
 Daniel Stenberg -- curl, cURL, Curl, CURL. Groks URLs.
-------------------------------------------------------
This SF.NET email is sponsored by:
SourceForge Enterprise Edition + IBM + LinuxWorld = Something 2 See!
http://www.vasoftware.com
Received on 2003-01-24