> Does anyone use --cacert (successfully) at all?

I remember playing with it and it seemed to work - never really used in much
in real use though:

# curl -iv --cacert tmp/certs/verisign.crt https://www.server.co.uk
* SSL connection using RC4-MD5
* Server certificate:
* subject: /C=GB/ST=London WC3N 4HH/L=1 Polo Mint Court/O=server farm PLC/
OU=server Technology Services/OU=Terms of use at www.verisign.com/RPA (c)99/CN=iba
nking.server.co.uk
* issuer: /O=VeriSign Trust Network/OU=VeriSign, Inc./OU=VeriSign Internation
al Server CA - Class 3/OU=www.verisign.com/CPS Incorp.by Ref. LIABILITY LTD.(c)97 Ve
riSign
* Verify result: 0
* Connected to www.server.co.uk (10.11.22.66)
> GET / HTTP/1.1
User-Agent: curl/7.7 (i686-pc-linux-gnu) libcurl 7.7 (SSL 0.9.6)
Host: www.server.co.uk
Pragma: no-cache
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*

Cheers

Paul

-- 
         Paul Harrington              ___________________________________
   Independent Internet Limited      /       Phone:  07779 622683
  Internet * Security * Unix * NT   /        Fax:    0870 2841627
___________________________________/       URL http://www.comms.net