cURL / Mailing Lists / curl-library / Single Mail


Re: Curl with DER certificates format when verifypeer is enabled

From: Michael Wood <>
Date: Tue, 9 Oct 2012 08:26:32 +0200

On 9 October 2012 07:26, bala suru <> wrote:
> Hi,
> Today I have enabled the CURLOPT_SSL_VERIFYPEER to true , since I have to
> verify my server certificates . Used and ECC crypto and generated the server
> certificates in DER format ( it required have certificate in DER format) .
> Till SSl handshke went fine when it come to peer verification , I got the
> below curl error "curl_easy_perform() failed: SSL connect error , error no
> is 35 ".
> After going through few posts I came to know that this error may be because
> of DER format .
> I need to confirm that my error is because of fomrat only , if it is yes , I
> need a help to fix this problem at the curl side ..

Yes, I believe libcurl cannot handle DER format certificates (unless
you do some magic with SSL contexts or something, I think.

Just convert them to PEM format. It does not matter what format the
server needs. You do not need to convert them on the server.


Michael Wood <>
List admin:
Received on 2012-10-09