curl-library
Re: [WCRU][LIB] Verifying FTP server certificate using a CA certificate chain
Date: Fri, 27 May 2011 15:21:36 +0800
Hello,
To give more detail this is the log in curl:
* successfully set certificate verify locations:
* CAfile: none
CApath: /certs
* SSL re-using session ID
* SSL certificate problem, verify that the CA cert is OK. Details:
error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify
failed
* Closing connection #0
* Peer certificate cannot be authenticated with known CA certificates
Thanks,
Gran
On Fri, May 27, 2011 at 3:18 PM, Gran Ville Van Lintao <
granvillelintao_at_gmail.com> wrote:
> Hello,
>
> I'm programming a ftp client that uses libcurl to upload to a remote FTP
> server.
> I already got it working even with just one root CA certificate, but it
> doesn't work when I already use
> a "chain" of CA certificates.
>
> this is ftpclient_which_use_curl
> - uses CA_PATH
> - CA_PATH has CA certificates: *root_certificate*(self-signed) and *
> intermediate_certificate*(issued by root_certificate)
> |
> |
> |
> |
> \/
> this is ftpserver
> - gives a server certificate issued by the CA *intermediate_certificate*during connection
>
> Can anyone tell me how to make libcurl work using this setup, and if it is
> really supported?
> I tried scanning the mailing list but i don't think its answered clearly
> regarding chained CAs.
>
> Thanks a lot.
> Gran
>
-------------------------------------------------------------------
List admin: http://cool.haxx.se/list/listinfo/curl-library
Etiquette: http://curl.haxx.se/mail/etiquette.html
Received on 2011-05-27