>With curl version below - I see that the server verification is skipped from the curl verbose logs. I am setting the CURLOPT_CAINFO to point to the proper certs as well. How can i setup curl so that it does validate the server certificates.

CURLOPT_SSL_VERIFYPEER & CURLOPT_SSL_VERIFYHOST are your friends.

But they have a secure default values (validate the server certificate).

Can you show us how you are using curl (and the verbose logs)?

If you are using the curl (not libcurl), you should NOT have -k option in you command-line.

Regards,

Yehezkel Horowitz

-------------------------------------------------------------------
List admin: http://cool.haxx.se/list/listinfo/curl-library
Etiquette: http://curl.haxx.se/mail/etiquette.html
Received on 2013-10-17