cURL / Mailing Lists / curl-library / Single Mail

curl-library

Re: CURLOPT_SSL_VERIFYPEER and ca-bundle

From: Nilesh <nilesh_at_kenati.com>
Date: Fri, 30 Mar 2007 13:01:48 +0530

Anybody to help on this ????

--
Nilesh
Nilesh wrote:
> Hello,
>
> Trying to verify the SSL certificate from Server.
>
> Using following options.
>
> - CURLOPT_SSL_VERIFYPEER is set to 1.
> - default ca-bundle has been installed at 
> /usr/local/share/curl-ca-bundle.crt
> - ca-bundle.h has the same location defined.
>
> - Not at all setting CURLOPT_CAINFO and CURLOPT_PATH.
>
> - Additionaly using CURLOPT_VERIFY_HOST=2
>
>
> Still I am getting following messages/errors,
> /
> == Info: SSLv3, TLS handshake, Client hello (1):
> == Info: SSLv3, TLS handshake, Server hello (2):
> == Info: SSLv3, TLS handshake, CERT (11):
> == Info: SSLv3, TLS alert, Server hello (2):
> == Info: SSL certificate problem, verify that the CA cert is OK. Details:
> error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate 
> verify failed/
>
>
> - Tried setting the same path ( default one) with CURLOPT_CAINFO 
> option, still facing the same error.
>
> - I have appended my own CA certificate to default ca-bundle.crt
> - Even tried with only my own (single) certificate inside default 
> ca-bundle.crt file, stiil the same error
>
>
> Any clue what must be missing ??
>
>
> Thanks,
> Nilesh
Received on 2007-03-30