Download
Browse source Changelog
Documentation
Project   Bug Bounty   Help us   Known bugs   TODO Protocols   CA bundle   HTTP Cookies   HTTP/2   SSL Certs Releases   Security   Version numbers   Vulnerabilities curl tool   man page   Tutorial   HTTP scripting Who and Why
libcurl
ABI API Competitors Examples Features Mailing list Related libs Using libcurl Tutorial Testimonials
Get Help
curl-library curl-users Mailing lists Book: Everything curl Video presentations Report a bug Paid support
Development
Autobuilds Code review Code style Contribute Dashboard Deprecate Internals Release Notes Release Procedure Roadmap Run Tests Security Process Specifications Test curl
News
Changelog Release table
curl / Mailing Lists / curl-library / Single Mail
Buy commercial curl support from WolfSSL. We help you work out your issues, debug your libcurl applications, use the API, port to new platforms, add new features and more. With a team lead by the curl founder himself.

Re: CURLOPT_SSL_VERIFYPEER - multiple paths

From: Rainer Canavan via curl-library <curl-library_at_cool.haxx.se>
Date: Thu, 2 Jul 2020 13:01:06 +0200

[...]
> > investigation learns that certificate has 2 paths which 1 of them if valid
> > and other has 'self signed cert'. How can is setup curl lib so that it
> > 'VERIFYPEER' , so that connection succeeds if there is still 'a valid path';
> > despite some that having error?
>
> This sounds like a TLS library problem.

It does indeed sound suspiciously similar to the problems in various TLS
libraries when the "AddTrust External Root CA" expired on May 30th, where
the libraries would fail to construct an alternate, valid trust chain.

rainer
-------------------------------------------------------------------
Unsubscribe: https://cool.haxx.se/list/listinfo/curl-library
Etiquette: https://curl.haxx.se/mail/etiquette.html
Received on 2020-07-02