cURL / Mailing Lists / curl-library / Single Mail

curl-library

Issue with CURLOPT_SSL_VERIFYPEER?

From: Heinrich Lang <downliner_at_gmx.de>
Date: Fri, 03 Sep 2010 14:00:26 +0200

Hi,

im using libcurl 7.21.1 to sent a HTTP-HEAD request to a HTTPS website with CURLOPT_SSL_VERIFYPEER set to 1 and CURLOPT_SSL_VERIFYHOST set to 2, using the cacert.pem file from http://curl.haxx.se/ca/cacert.pem

This works like a charm sofar, but i have an issue with CURLOPT_SSL_VERIFYPEER:

The https://www.google.de Website provides a certificate with the common Name 'www.google.com', thus i expected the request to be rejected with CURLE_PEER_FAILED_VERIFICATION and "SSL: certificate subject name 'www.google.com' does not match target host name 'www.google.de'" in the error buffer.

But when I perfom a request to 'https://www.google.de' i get a CURLE_OK response instead?

-- 
GMX DSL SOMMER-SPECIAL: Surf & Phone Flat 16.000 für nur 19,99 &euro;/mtl.!*
http://portal.gmx.net/de/go/dsl
-------------------------------------------------------------------
List admin: http://cool.haxx.se/list/listinfo/curl-library
Etiquette:  http://curl.haxx.se/mail/etiquette.html
Received on 2010-09-03