The site that I'm trying to get to has a cert from Verisign, which I would
assume is in the bundle, correct?

I think I may have been wrong about the command line version of curl being
7.10. When I use curl -V it says its 7.9.8 but the link I used to download
the Win32 binary says it is 7.10. I don't have to use any options when using
the command line version of curl.

In any case, I don't know what you mean about doing the magic things to make
CAPATH work. Where is this stuff detailed? I've been searching all through
the docs and can't find anything.

Thanks for trying to help.

Derek

----Original Message Follows----
From: Daniel Stenberg <daniel_at_haxx.se>
Reply-To: curl-library_at_lists.sourceforge.net
To: libcurl Mailing list <curl-library_at_lists.sourceforge.net>
Subject: Re: SSL error w/libcurl 7.10, need help
Date: Mon, 27 Jan 2003 16:55:45 +0100 (CET)

On Fri, 24 Jan 2003, Derek Ealy wrote:

> Today I downloaded libcurl 7.10.3 and also the latest version of OpenSSL.
> After getting them built and installed I'm getting this error message
when
> trying to retrieve a page via https:
>
> Caught exception: SSL: error:14090086:SSL
> routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed
>
> I've tried using CURLOPT_CAPATH and pointing it to a dir with the
> ca-bundle.crt file but that isn't helping.

Well, if the CA cert bundle is good for that server's bundle it gives you
this message as well. The site you're talking to might be self-signed.

Have you done the magic things necessary so that CAPATH works for you on
Windows? AFAIK, it requires that you hack the script that uses symlinks in
the original or something like that.

> Its doubly confusing because when I use the command line version of curl
to
> access these https urls it works with no problem.

That certainly seems odd. Have you used the CA options the same way the curl
command line tool does?

--
  Daniel Stenberg -- curl, cURL, Curl, CURL. Groks URLs.
-------------------------------------------------------
This SF.NET email is sponsored by:
SourceForge Enterprise Edition + IBM + LinuxWorld = Something 2 See!
http://www.vasoftware.com
_________________________________________________________________
The new MSN 8: advanced junk mail protection and 2 months FREE*  
http://join.msn.com/?page=features/junkmail
-------------------------------------------------------
This SF.NET email is sponsored by:
SourceForge Enterprise Edition + IBM + LinuxWorld = Something 2 See!
http://www.vasoftware.com