cURL / Mailing Lists / curl-library / Single Mail

curl-library

Re: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE

From: Vijay <nags.vijay_at_gmail.com>
Date: Wed, 14 May 2008 11:14:49 +0530

> error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate
verify
> failed

http://curl.haxx.se/docs/sslcerts.html

I have gone through this and done the following steps

o openssl s_client -connect xxxxx.com:443 |tee logfile
     o type "QUIT", followed by the "ENTER" key
     o The certificate will have "BEGIN CERTIFICATE" and "END CERTIFICATE"
       markers.
     o If you want to see the data in the certificate, you can do: "openssl
       x509 -inform PEM -in certfile -text -out certdata" where certfile is
       the cert you extracted from logfile. Look in certdata.
     o If you want to trust the certificate, you can append it to your
       cert_bundle or use it stand-alone as described. Just remember that the
       security is no better than the way you obtained the certificate.

Then deleted all and added only this certificate in the bundle in path and
name
/usr/local/share/curl/curl-ca-bundle.crt

But even then am getting the same error. Please let me know what is the
issue.

-- 
VIJAY
Received on 2008-05-14