> Date: Wed, 5 Sep 2012 21:04:27 +0200
> From: okoeroo_at_nikhef.nl
> To: curl-library_at_cool.haxx.se
> Subject: Re: SSL3_READ_BYTES:sslv3 error when disabled verify issuer and hosts
>
> On 05-09-12 19:15, Sidde Gowda wrote:
> > Hi All
> >
> > It is strange to me. I have disabled verify issuer and hosts but still seeing below error. Any idea?
> >
> > * About to connect() to 172.17.0.11 port 8443 (#0)
> > * Trying 172.17.0.11...
> > * connected
> > * Connected to 172.17.0.11 (172.17.0.11) port 8443 (#0)
> > * error setting certificate verify locations, continuing anyway:
> > * CAfile: /hdp/cert/local/ca/server_cert.crt
> > CApath: none
> > * error:14094412:SSL routines:SSL3_READ_BYTES:sslv3 alert bad certificate
> > * Closing connection #0
> > * SSL connect error
> >
> > Regards
> > Sidde
> >
>
> What's in the /hdp/cert/local/ca/server_cert.crt file? May I freely assume
> this is the server certificate? If so, I wonder why.
>
> How did you disable it? libucurl settings or curl -k?
>
>
> Oscar
>
>
Hi

Thanks. Yes, it is server cert and I am using libcurl options. The reason I found was, server port number (8443) in the URI was expecting client certificate always. No matter whether we have enabled or disabled in libcurl (server requirements I guess). For simple https without needing a client certificate, server had another port (8442). When I used it, verifier false worked as expected. Otherwise no.

Regards
Sidde

> >
> >
> > -------------------------------------------------------------------
> > List admin: http://cool.haxx.se/list/listinfo/curl-library
> > Etiquette: http://curl.haxx.se/mail/etiquette.html
> >
>
> -------------------------------------------------------------------
> List admin: http://cool.haxx.se/list/listinfo/curl-library
> Etiquette: http://curl.haxx.se/mail/etiquette.html
                                               

-------------------------------------------------------------------
List admin: http://cool.haxx.se/list/listinfo/curl-library
Etiquette: http://curl.haxx.se/mail/etiquette.html
Received on 2012-09-05