On Fri, 10 Dec 2010, ÕÅÐ÷·å wrote:

>> You can get the one Firefox uses from here:
>>
>> http://curl.haxx.se/docs/caextract.html
>
> Thanks for your help, I have just tried, still doesn't work. when I run
> "curl --cacert cacert.pem https://bugzilla.mozilla.org", it got following
> output: curl: (60) Peer certificate cannot be authenticated with known CA
> certificates More details here: http://curl.haxx.se/docs/sslcerts.html

... as Kamil explained previously, NSS does not (yet) support loading PEM
files like that but needs a patch for it (that Fedora has applied on the NSS
they ship).

So I believe the solutions to have to select from are that you either don't
use PEM certificates with NSS, or you arrange your NSS library to have PEM
support.

-- 
  / daniel.haxx.se

-------------------------------------------------------------------
List admin: http://cool.haxx.se/list/listinfo/curl-library
Etiquette: http://curl.haxx.se/mail/etiquette.html
Received on 2010-12-10