> Anyone see something blatantly obvious ?

Nothing better than filling a maillist with my own replies to myself as I figure this
little nit out.

The answer was in front of me.

 INFO: 1363053559.803441850 : CAfile: none
  CApath: ./Entrust_bundle

duh.

Code change :

/* curl_easy_setopt ( curl, CURLOPT_CAPATH, "./Entrust_bundle" ); */
        curl_easy_setopt ( curl, CURLOPT_CAINFO, "./Entrust_bundle" );

Problem solved.

Now I see :

 INFO: 1363054172.93427844 : successfully set certificate verify locations:

 INFO: 1363054172.93746794 : CAfile: ./Entrust_bundle
  CApath: none

 INFO: 1363054172.94734396 : SSLv3, TLS handshake, Client hello (1):

TRACE: 1363054172.95048571 : => Send SSL data, 0000000342 bytes (0x00000156)
 INFO: 1363054172.117976116 : SSLv3, TLS handshake, Server hello (2):

TRACE: 1363054172.118293608 : <= Recv SSL data, 0000000049 bytes (0x00000031)
 INFO: 1363054172.119285905 : SSLv3, TLS handshake, CERT (11):

TRACE: 1363054172.119596276 : <= Recv SSL data, 0000002597 bytes (0x00000a25)
 INFO: 1363054172.129206685 : SSLv3, TLS handshake, Server finished (14):

TRACE: 1363054172.129522964 : <= Recv SSL data, 0000000004 bytes (0x00000004)
 INFO: 1363054172.133620830 : SSLv3, TLS handshake, Client key exchange (16):

TRACE: 1363054172.133934681 : => Send SSL data, 0000000262 bytes (0x00000106)
 INFO: 1363054172.134512287 : SSLv3, TLS change cipher, Client hello (1):

TRACE: 1363054172.134822253 : => Send SSL data, 0000000001 bytes (0x00000001)
 INFO: 1363054172.137029811 : SSLv3, TLS handshake, Finished (20):

TRACE: 1363054172.137342691 : => Send SSL data, 0000000016 bytes (0x00000010)
 INFO: 1363054172.163440174 : SSLv3, TLS change cipher, Client hello (1):

TRACE: 1363054172.163754187 : <= Recv SSL data, 0000000001 bytes (0x00000001)
 INFO: 1363054172.165195408 : SSLv3, TLS handshake, Finished (20):

TRACE: 1363054172.165506265 : <= Recv SSL data, 0000000016 bytes (0x00000010)
 INFO: 1363054172.166095767 : SSL connection using RC4-MD5

 INFO: 1363054172.166439401 : Server certificate:

 INFO: 1363054172.166874810 : subject: C=US; ST=New York; L=New York; O=Some Company; CN=www.targetsite.com

 INFO: 1363054172.167199668 : start date: 2012-10-01 13:51:01 GMT

 INFO: 1363054172.167520721 : expire date: 2013-12-29 01:23:47 GMT

 INFO: 1363054172.167938083 : subjectAltName: www.targetsite.com matched

 INFO: 1363054172.168451106 : issuer: C=US; O=Entrust, Inc.; OU=www.entrust.net/rpa is incorporated by reference; OU=(c) 2009 Entrust, Inc.; CN=Entrust Certification Authority - L1C

 INFO: 1363054172.168773616 : SSL certificate verify ok.

I feel a small sample bit of code could be written for the docs from this searching of mine.
 Really, it wasn't obvious how to find, create, use the CAcert bundle.

dc
-------------------------------------------------------------------
List admin: http://cool.haxx.se/list/listinfo/curl-library
Etiquette: http://curl.haxx.se/mail/etiquette.html
Received on 2013-03-12