cURL / Mailing Lists / curl-library / Single Mail

curl-library

SSL Certificate Verification

From: White, Gary [IT] <gary.white_at_citigroup.com>
Date: Mon, 13 Oct 2003 18:14:59 +0100

Hi,

I am new to libcurl and beg your patience. I am developing an application using C on Windows 2000 for personal use using curl version 7.10.7. I set up my own website on IIS version 6.0. I obtained a trial certificate from Verisign and have set it up such that I am able to make an ssl connection through my browser to this website. I am having problems verifying my servers certificate when I try to make a curl connection from my application I cannot verify the server.

I have succeeded in connecting to the server and perform my functionality with verifypeer set to false.

curl_easy_setopt(curl, CURLOPT_SSL_VERIFYPEER, FALSE);

However, when I set it to true I get the error

* SSL certificate problem, verify that the CA cert is OK

I have tried various combinations of

curl_easy_setopt(curl,CURLOPT_CAINFO,pCACertFile);

but none of these seem to be working properly. It is my understanding that the cert bundle should be able to authenticate certificates(temporary?) signed by verisign.

Perhaps, I have not set up/using the bundle correctly, there is no support for temporary certificates or I am using the CURLOPT_CAINFO option incorrectly.

I have more than likely missed/misread some documentation or am using libcurl incorrectly. Any advise on how to use libcurl to verify my servers certificate would be much appreciated.

All the best.

Gary White
Citigroup
Securities Services Technology
0207-5007085

-------------------------------------------------------
This SF.net email is sponsored by: SF.net Giveback Program.
SourceForge.net hosts over 70,000 Open Source Projects.
See the people who have HELPED US provide better services:
Click here: http://sourceforge.net/supporters.php
Received on 2003-10-13