cURL / Mailing Lists / curl-library / Single Mail

curl-library

v7.33.0 dll is giving an SSL error where previous versions did not

From: Mike Mio <mikemio_at_rogers.com>
Date: Wed, 30 Oct 2013 15:28:31 -0400

Hi,

I am attempting to upgrade my FTP program to the Win32 v7.33.0 libCURL dlls.

Plain FTP works correctly but when I try to connect via SSL I get this
error:

"SSL peer certificate or SSH remote key was not OK"

CURLOPT_SSL_VERIFYPEER is set to 0

I tried connecting with curl.exe and -k and it works just fine.

I am wonder if some default changed that I need to account for or there
something I was doing incorrectly but previously worked for some reason.
The v7.32.0 and v7.29.0 dlls work correctly.

See below for more details.

Any idea what could be going on?

Thanks.
Mike

Details:
=============================================
The debug trace only says this (after a welcome msg) and then ends:

=> Send header, 0000000010 bytes (0x0000000a)
AUTH SSL
<= Recv header, 0000000045 bytes (0x0000002d)
500 This security scheme is not implemented
=> Send header, 0000000010 bytes (0x0000000a)
AUTH TLS
<= Recv header, 0000000018 bytes (0x00000012)
234 AUTH TLS OK.

=============================================
I have the code set up this way:

CURL* curl = curl_easy_init();

#ifdef _DEBUG
                 curl_easy_setopt(curl, CURLOPT_VERBOSE, 1L);
                 curl_easy_setopt(curl,CURLOPT_DEBUGFUNCTION,&vmi_trace);
#endif //DEBUG

                 curlResult = curl_easy_setopt(curl, CURLOPT_FTP_FILEMETHOD,
CURLFTPMETHOD_SINGLECWD );
                
                curlResult =
curl_easy_setopt(curl,CURLOPT_FTP_CREATE_MISSING_DIRS, 0L);
                
                 curlResult =curl_easy_setopt(curl,CURLOPT_USERNAME,
m_ftpHost_username);

                curlResult = curl_easy_setopt(curl,CURLOPT_PASSWORD,
sPassword);
                                 
                curlResult = curl_easy_setopt(curl,CURLOPT_USE_SSL ,
CURLUSESSL_ALL);
                         
                curlResult = curl_easy_setopt(curl,CURLOPT_FTPSSLAUTH ,
CURLFTPAUTH_DEFAULT);
                 
                curlResult = curl_easy_setopt(curl,CURLOPT_SSL_VERIFYPEER ,
0);
        
                curl_easy_setopt(curl, CURLOPT_FTP_RESPONSE_TIMEOUT,
m_nFTPTimeout); // 30

                curl_easy_setopt(curl,CURLOPT_URL, sUrl);

                
                if(m_nUsePassiveMode > 0)
                {
                        curl_easy_setopt(curl, CURLOPT_FTPPORT, NULL);
//turn off active mode
                
                        if(IDN_FTP_MODE_EPSV == m_nUsePassiveMode)
                        {
                                curl_easy_setopt(curl,
CURLOPT_FTP_USE_EPSV,TRUE);
                        }
                        else
                        {
                                curl_easy_setopt(curl,
CURLOPT_FTP_USE_EPSV,FALSE);
                        }
                }
                else
                {
                        curl_easy_setopt(curl, CURLOPT_FTPPORT, "-");
                }

                curl_easy_setopt(curl, CURLOPT_PORT, m_export_port); //21

                curlResult = curl_easy_setopt(curl, CURLOPT_CONNECT_ONLY,0);

                   curlResult = curl_easy_setopt(g_curlSession,
CURLOPT_WRITEFUNCTION, writeData2);
                                 
                curlResult = curl_easy_perform(curl);

=============================================

-------------------------------------------------------------------
List admin: http://cool.haxx.se/list/listinfo/curl-library
Etiquette: http://curl.haxx.se/mail/etiquette.html
Received on 2013-10-30