It's not SSL in this case but SSH, and -k disables the host fingerprint checking when using ssh. It sounds like for some reason curl can't interpret your ~/.ssh/known_hosts file correctly, or the host key actually has changed. Can you ssh into the box using OpenSSH without issue? What version of OpenSSH are you using?

---
** [bugs:#1336] Failed to download file from a Windows XP system**
**Status:** open
**Created:** Wed Feb 19, 2014 09:45 PM UTC by Minh Nguyen
**Last Updated:** Mon Feb 24, 2014 08:46 PM UTC
**Owner:** Daniel Stenberg
Curl version: 7.35.0
I set up the SSHd service (using Cygwin) on my Windows XP system 10.10.16.96.
1. When I used "scp" to download a file from the Windows box, I did not have any problem:
$ scp mnguyen_at_10.10.16.96:/home/mnguyen/test /tmp
mnguyen_at_10.10.16.96's password:
test                                            100%   16     0.0KB/s   00:00
2. However, when I used "curl" to download the same file, I got errors:
$ ./curl -v -u mnguyen scp://10.10.16.96/home/mnguyen/test
Enter host password for user 'mnguyen':
* Hostname was NOT found in DNS cache
*   Trying 10.10.16.96...
* Connected to 10.10.16.96 (10.10.16.96) port 22 (#0)
* SSH MD5 fingerprint: 28c9ed920380957018d758608272e6dd
* SSH host check: 2, key: <none>
* Closing connection 0
curl: (51) SSL peer certificate or SSH remote key was not OK
Should "curl" use the same key defined in .ssh/known_hosts (as "scp" used)?
Note that I don't have any problem using "curl" to download a file from a Linux system.
---
Sent from sourceforge.net because curl-tracker@cool.haxx.se is subscribed to https://sourceforge.net/p/curl/bugs/
To unsubscribe from further messages, a project admin can change settings at https://sourceforge.net/p/curl/admin/bugs/options.  Or, if this is a mailing list, you can unsubscribe from the mailing list.