On Thu, 24 Feb 2011, Janne H wrote:

> I can successfully run:
>
> curl -k -E mypem.pem:sekret https://foo.bar:886/test.php
>
> but I would like to skip the -k switch.
>
> I have done
> openssl s_client -connect foo.bar:886 |tee logfile
> and
> openssl x509 -inform PEM -in logfile -text -out certdata
>
> shows some reasonable data when I look in the file certdata

Right, but you got the server's certificate, that's not the CA cert you need
for verifying that server's certificate.

I don't have any conveniant command lines for that lying around...

-- 
  / daniel.haxx.se
-------------------------------------------------------------------
List admin: http://cool.haxx.se/list/listinfo/curl-users
FAQ:        http://curl.haxx.se/docs/faq.html
Etiquette:  http://curl.haxx.se/mail/etiquette.html