Hello Kamil,

thank you for your answer.
I'm using libcurl version 7.19.7
version of nss 3.12.9-3.el6

what do u think by "OpenSSL CA bundle" ?
how can I determine wether I'm using it?

maybe answering a simple question would help.
how can I receive/get the mentioned error if there are no certificates in
the db?
or are there any certificate whitch cannot be diplayed by "certutil -L"?

Thank you

On 8 November 2011 12:56, Kamil Dudka <kdudka_at_redhat.com> wrote:

> On Tuesday 08 November 2011 12:32:06 martin kucinsky wrote:
> > from time to time i'm getting SEC_ERROR_REUSED_ISSUER_AND_SERIAL error
> > while using libcurl. but there are no certificates in NSS database when
> I
> > look into it using "certutil -d sql:db_path -L -h all"
>
> What is your version of libcurl and nss?
>
> > so what certificate it i compared to then?
>
> Then you are probably using the OpenSSL CA bundle? Try to use
> CURLOPT_CAINFO
> to override the default CA bundle.
>
> > does anybody knows how this works?
>
> The certificates from files are loaded by the libnsspem.so PKCS #11 module.
>
> Kamil
>

-------------------------------------------------------------------
List admin: http://cool.haxx.se/list/listinfo/curl-library
Etiquette: http://curl.haxx.se/mail/etiquette.html
Received on 2011-11-09