cURL / Mailing Lists / curl-users / Single Mail

curl-users

Re: -k not working?

From: Kees Nijssen <kees.nijssen_at_quicknet.nl>
Date: Tue, 10 Jul 2012 19:29:52 +0300

Op 10 jul. 2012 om 03:48 heeft Mike Brown <brown_at_mrvideo.vidiot.com> het volgende geschreven:

> New user to curl.
>
> curl -V
> curl 7.26.0 (i386-pc-solaris2.10) libcurl/7.26.0 OpenSSL/1.0.0j zlib/1.2.7 libid
> n/1.8 libssh2/1.4.2
> Protocols: dict file ftp ftps gopher http https imap imaps pop3 pop3s rtsp scp s
> ftp smtp smtps telnet tftp
> Features: IDN IPv6 Largefile NTLM NTLM_WB SSL libz TLS-SRP
>
>
> When I do the following, it errors out:
>
> curl -C -k -T filename_to_send -u user:password ftps://domain.name/
> % Total % Received % Xferd Average Speed Time Time Time Current
> Dload Upload Total Spent Left Speed
> 0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0cu
> rl: (60) SSL certificate problem: unable to get local issuer certificate
> More details here: http://curl.haxx.se/docs/sslcerts.html
>
> curl performs SSL certificate verification by default, using a "bundle"
> of Certificate Authority (CA) public keys (CA certs). If the default
> bundle file isn't adequate, you can specify an alternate file
> using the --cacert option.
> If this HTTPS server uses a certificate signed by a CA represented in
> the bundle, the certificate verification probably failed due to a
> problem with the certificate (it might be expired, or the name might
> not match the domain name in the URL).
> If you'd like to turn off curl's verification of the certificate, use
> the -k (or --insecure) option.
>
>
> But, as can be seen, I do have the -k option and it still fails.
>
> Any clues as to why -k isn't working?
>
> As a side note, when I run curl under Linux Fedora 14, using -v reports that
> curl can't find the peer certificate info for StartCOM, the issuer of the
> certificate for the site I am transferring files with. How does one get
> the /etc/pki/tls/certs/ca-bundle.crt file updated?
>
> Thanks.
>
> MB
>
The -C option actually takes an offset as argument, so using -C -k would have curl interpret -k as the offset, and not recognize it as --insecure.

Kees

-------------------------------------------------------------------
List admin: http://cool.haxx.se/list/listinfo/curl-users
FAQ: http://curl.haxx.se/docs/faq.html
Etiquette: http://curl.haxx.se/mail/etiquette.html
Received on 2012-07-10