curl / Mailing Lists / curl-library / Single Mail
Buy commercial curl support from WolfSSL. We help you work out your issues, debug your libcurl applications, use the API, port to new platforms, add new features and more. With a team lead by the curl founder himself.

Re: Adding Mozzila CA certificates

From: Daniel Stenberg via curl-library <curl-library_at_lists.haxx.se>
Date: Mon, 27 Nov 2023 16:10:58 +0100 (CET)

On Mon, 27 Nov 2023, Luis Carlos Chalaca Figueira via curl-library wrote:

> While developing a crawler I realized that some websites that can be
> displayed by Chrome and Firefox would throw SSL errors on libcurl requests

The real world is a tough place!

> SSL connect error
>
> SSL routines::unsafe legacy renegotiation disabled
>
> SSL peer certificate or SSH remote key was not OK
>
> Therefore I had the idea of adding the certificates used by firefox to
> prevent that.

Only the last of those three errors are related to server verification.

The first one is a bit hard to tell the reason for as it is a fairly generic,
and I think the second one explains itself...

-- 
  / daniel.haxx.se
  | Commercial curl support up to 24x7 is available!
  | Private help, bug fixes, support, ports, new features
  | https://curl.se/support.html
-- 
Unsubscribe: https://lists.haxx.se/mailman/listinfo/curl-library
Etiquette:   https://curl.se/mail/etiquette.html
Received on 2023-11-27