> On Nov 14, 2017, at 1:10 PM, Ray Satiro via curl-library <curl-library_at_cool.haxx.se> wrote:
>
> On 11/13/2017 6:43 PM, Kelly Graus wrote:
>> I’ve been using libcurl in an OS X app for several years, linking against the system provided dynamic library. Recently we wanted to add the ability to do a multipart form post, which requires a newer version of libcurl than is provided by Apple. So I downloaded the source and compiled it using the following options:
>>
>> ./configure --prefix=/usr/local/curl --with-darwinssl --enable-static --disable-ldap --disable-ldaps
>>
>> I then link against the static library that is built, and everything works great.
>>
>> However, when I build a release and run it on a different machine, I receive the following error whenever I try to download a file using HTTPS: "Problem with the SSL CA cert (path? access rights?).”
>>
>> I’ve tried in on two test machines, both of which are running slightly older versions of OS X than what I used to compile with (10.11 and 10.12, where I’m using 10.13). I don’t have another 10.13 machine right now to test if this is related to the OS version.
>
> What is the curl_version() and turn on CURLOPT_VERBOSE [1] to check for
> relevant information.
>
> [1]: https://curl.haxx.se/libcurl/c/CURLOPT_VERBOSE.html <https://curl.haxx.se/libcurl/c/CURLOPT_VERBOSE.html>

Using curl_version_info, I get the following:

libcurl 7.56.1
ssl: SecureTransport
host: x86_64-apple-darwin17.2.0
protocols: dict, file, ftp, ftps, gopher, http, https, imap, imaps, pop3, pop3s, rtsp, smb, smbs, smtp, smtps, telnet, tftp
features: IPv6, SSL, libz, NTLM, asynchronous DNS, large file, NTLM-WB, Unix Sockets

With verbose output enabled, I see the underlying error is "SSL: can't load CA certificate file /etc/ssl/cert.pem.” I’ve verified that this file is missing on the machines that don’t work. I’m looking into where those files are supposed to be from, but if anyone knows it would be greatly appreciated!

-------------------------------------------------------------------
Unsubscribe: https://cool.haxx.se/list/listinfo/curl-library
Etiquette: https://curl.haxx.se/mail/etiquette.html
Received on 2017-11-14