cURL / Mailing Lists / curl-library / Single Mail

curl-library

Re: PROBLEM: libcurl vs. NSS .. 8054 SEC_ERROR_REUSED_ISSUER_AND_SERIAL

From: Kamil Dudka <kdudka_at_redhat.com>
Date: Tue, 8 Nov 2011 12:56:37 +0100

On Tuesday 08 November 2011 12:32:06 martin kucinsky wrote:
> from time to time i'm getting SEC_ERROR_REUSED_ISSUER_AND_SERIAL error
> while using libcurl. but there are no certificates in NSS database when I
> look into it using "certutil -d sql:db_path -L -h all"

What is your version of libcurl and nss?
 
> so what certificate it i compared to then?

Then you are probably using the OpenSSL CA bundle? Try to use CURLOPT_CAINFO
to override the default CA bundle.

> does anybody knows how this works?

The certificates from files are loaded by the libnsspem.so PKCS #11 module.

Kamil
-------------------------------------------------------------------
List admin: http://cool.haxx.se/list/listinfo/curl-library
Etiquette: http://curl.haxx.se/mail/etiquette.html
Received on 2011-11-08