curl-and-python

RE: PycURL 7.21.5 on Windows fails "file type P12 for certificate not supported"

From: Binney, Peter via curl-and-python <curl-and-python_at_cool.haxx.se>
Date: Thu, 7 Jan 2016 09:04:14 +0000

Hi Oleg - you are right, I can't get the .p12 to work with command-line curl either. I'm sure it used to many years ago.

But the new curl's (I've tried 7.45 and 7.46), when using --cert filename.p12:password, both fail saying:

  ... could not load PEM client certificate, OpenSSL error error:0906D06C ...

Anyway, switching to .pem works fine in pycurl.

Many thanks!

-----Original Message-----
From: Oleg Pudeyev [mailto:oleg+pycurl_at_bsdpower.com]
Sent: Wednesday, January 06, 2016 4:00 AM
To: Oleg Pudeyev via curl-and-python
Cc: Binney, Peter
Subject: Re: PycURL 7.21.5 on Windows fails "file type P12 for certificate not supported"

On Tue, 5 Jan 2016 22:38:32 -0500
Oleg Pudeyev via curl-and-python <curl-and-python_at_cool.haxx.se> wrote:

> On Tue, 5 Jan 2016 11:23:10 +0000
> "Binney, Peter" <Peter.Binney_at_commerzbank.com> wrote:
>
> > In particular, how do I install on Windows so I can continue using a
> > client certificate in a .p12 file, please?
> >
> > I am trying to move from 7.19.5 (installed from
> > pycurl-7.19.5.1-cp34-none-win32.whl) to
> > http://pycurl.sourceforge.net/download/pycurl-7.21.5/pycurl-7.21.5.w
> > in32-py3.4.msi
> >
> > But, fetches fail with "file type P12 for certificate not supported"
> > from a pycurl instance set up using:
> >
> > c.setopt(pycurl.SSLCERT, "path to .p12 file")
> > c.setopt(pycurl.SSLCERTPASSWD, "password for p12")
> > c.setopt(pycurl.SSLCERTTYPE, "P12")
> >
> > I assume I need to do something more than just run the .msi?
> >
> > Thanks,
> > Peter
>
> You may need to convert that certificate to PEM format since pycurl
> now uses OpenSSL. Try this:
>
> http://stackoverflow.com/questions/15144046/need-help-converting-p12-c
> ertificate-into-pem-using-openssl
>
> Also, the wheel achive you mentioned was not an official release. Do
> you know which SSL backend it was/is using?
>
> Oleg

On the other hand it looks like libcurl should support p12 format. Are you able to connect to your server using your certificate using curl
7.46.0 program obtained from http://curl.haxx.se/download.html ?

Oleg

_______________________________________________
http://cool.haxx.se/cgi-bin/mailman/listinfo/curl-and-python
Received on 2016-01-07