Hey

This may not be a secret to the ones who are in the loop but it certainly made
me scratch my head a while until the details were revealed to me. Apple has
patched OpenSSL so that it performs a modified CA cert verification procedure
by default, for curl and others:

http://daniel.haxx.se/blog/2011/11/05/apples-modified-ca-cert-handling-and-curl/

-- 
  / daniel.haxx.se
-------------------------------------------------------------------
List admin: http://cool.haxx.se/list/listinfo/curl-library
Etiquette:  http://curl.haxx.se/mail/etiquette.html