Buy commercial curl support from WolfSSL. We help you work
out your issues, debug your libcurl applications, use the API, port to new
platforms, add new features and more. With a team lead by the curl founder
himself.
Re: Help using libcurl with HTTP proxy on Android device
- Contemporary messages sorted: [ by date ] [ by thread ] [ by subject ] [ by author ] [ by messages with attachments ]
From: Henrik Holst via curl-library <curl-library_at_lists.haxx.se>
Date: Wed, 12 Apr 2023 03:50:18 +0200
and of course the code i saw in libcurl was for loading the client cert and
there it wasn't the file extension that where used but the value of
CURLOPT_SSLKEYTYPE and the man page for that also tells ""DER" format key
file currently does not work because of a bug in OpenSSL"
So it looks back to square one again, the openssl functions to search
directories only support PEM files. So it looks like one do have to use the
callback function and try to load and convert the cert yourself.
/HH
Den ons 12 apr. 2023 kl 03:35 skrev Henrik Holst <
henrik.holst_at_millistream.com>:
> are they not linked? On Linux they are usually stored as hexdigits.0 so
> openssl can find it via the hash but then that is just a link to the actual
> cert file like:
>
> lrwxrwxrwx 1 root root 23 dec 5 20:46 f081611a.1 ->
> Go_Daddy_Class_2_CA.pem
>
> /HH
>
> Den ons 12 apr. 2023 kl 03:30 skrev David Castillo <casvel.d_at_gmail.com>:
>
>> > howerver looking at the actual code it looks like what openssl calls
>> ASN.1 is actually DER and libcurl have code to load ASN.1 certificates. But
>> for this to work the certificate file must end with .DER (case
>> insensitive). So could it be that the file is stored with the wrong file
>> extension?
>>
>> The files in the user-installed CA certificates directory on my Android
>> emulator are indeed with a different extension. The extension is .0 (like
>> `924c6f19.0` and `f38e730c.0`). But I don't think I can update those files'
>> names
>>
>
Date: Wed, 12 Apr 2023 03:50:18 +0200
and of course the code i saw in libcurl was for loading the client cert and
there it wasn't the file extension that where used but the value of
CURLOPT_SSLKEYTYPE and the man page for that also tells ""DER" format key
file currently does not work because of a bug in OpenSSL"
So it looks back to square one again, the openssl functions to search
directories only support PEM files. So it looks like one do have to use the
callback function and try to load and convert the cert yourself.
/HH
Den ons 12 apr. 2023 kl 03:35 skrev Henrik Holst <
henrik.holst_at_millistream.com>:
> are they not linked? On Linux they are usually stored as hexdigits.0 so
> openssl can find it via the hash but then that is just a link to the actual
> cert file like:
>
> lrwxrwxrwx 1 root root 23 dec 5 20:46 f081611a.1 ->
> Go_Daddy_Class_2_CA.pem
>
> /HH
>
> Den ons 12 apr. 2023 kl 03:30 skrev David Castillo <casvel.d_at_gmail.com>:
>
>> > howerver looking at the actual code it looks like what openssl calls
>> ASN.1 is actually DER and libcurl have code to load ASN.1 certificates. But
>> for this to work the certificate file must end with .DER (case
>> insensitive). So could it be that the file is stored with the wrong file
>> extension?
>>
>> The files in the user-installed CA certificates directory on my Android
>> emulator are indeed with a different extension. The extension is .0 (like
>> `924c6f19.0` and `f38e730c.0`). But I don't think I can update those files'
>> names
>>
>
-- Unsubscribe: https://lists.haxx.se/mailman/listinfo/curl-library Etiquette: https://curl.se/mail/etiquette.htmlReceived on 2023-04-12