cURL / Mailing Lists / curl-library / Single Mail

curl-library

Clarification regarding CURLOPT_ISSUERCERT and CURLOPT_CAINFO

From: Sachin Nikumbh <sanikumbh_at_gmail.com>
Date: Fri, 30 Jan 2015 11:28:22 -0500

Hi,

I need some help in making it clear how CURLOPT_ISSUERCERT
and CURLOPT_CAINFO play role in case of multi-level server certificate
chain. I have following certificate chain for server:

RootCA, SubCA1, SubCA2, ServerCert

Do I have to have the following :

CURLOPT_CAINFO -> RootCA
CURLOPT_ISSUERCERT -> SubCA1, SubCA2

Or can I choose not to use CURLOPT_ISSUERCERT at all and have either of
following :

CURLOPT_CAINFO -> RootCA, SubCA1, SubCA2

or

CURLOPT_CAINFO -> RootCA

Is CURLOPT_ISSUERCERT optional in case of multi-level certificate chain for
server?

Thanks
Sachin

-------------------------------------------------------------------
List admin: http://cool.haxx.se/list/listinfo/curl-library
Etiquette: http://curl.haxx.se/mail/etiquette.html
Received on 2015-01-30