cURL / Mailing Lists / curl-library / Single Mail

curl-library

Re: Curl with DER certificates format when verifypeer is enabled

From: bala suru <balaqemu_at_gmail.com>
Date: Wed, 10 Oct 2012 09:49:36 +0530

When I enabled the ERROR buffer set option , I got this extra information
i. e 193: SSL: couldn't get X509-subject! ..

Does it mean my certificate is not correct or they are not converted
correctly from DER to PEM .

On Tue, Oct 9, 2012 at 4:38 PM, bala suru <balaqemu_at_gmail.com> wrote:

> Hi,
>
> I went through this
> http://blog.techstacks.com/2010/03/3-common-causes-of-unknown-ssl-protocol-errors-with-curl.html
> It does not match to any errors given in the above link because I checked
> the flow in wireshark , it pass these leveles :
>
>
> 1. Client hello with my specified chiper suite "ECDHE-ECDSA-AES128-CCM"
> and TLSv1.2
> 2. server accepts the above chiper
> 3. Certificate, Client Key Exchange, Certificate Verify, Change Cipher
> Spec, Hello Request, Hello Request
>
> I used the below steps to convert my key and cert
>
> 1. I used this to conevert the certificate to pem : *openssl x509 -inform
> der -in certificate.cer -out certificate.pem*
> 2. I used this for key *openssl pkcs8 -inform DER -nocrypt -in
> 33330001-root.pkcs8 -out key.pem*
>
> The key is in PKSc#8 unencrypted PEM format . Here am I following the
> proper steps to convert the key .?
>
> And I have enabled the verbose as well , but still I get only the error
> number with the error curl_easy_perform() failed: SSL connect error :
>
> I am not able to find out the proper error
>
>

-------------------------------------------------------------------
List admin: http://cool.haxx.se/list/listinfo/curl-library
Etiquette: http://curl.haxx.se/mail/etiquette.html
Received on 2012-10-10