cURL / Mailing Lists / curl-library / Single Mail

curl-library

SMTP: Persistant certificate failure with OpenSSL

From: <gokhansengun_at_gmail.com>
Date: Wed, 2 May 2012 17:30:48 +0300

Hi,

I am testing libcurl with smtp and ftp linked against openssl. A special test case shows interesting results. Here it is

- Remove hashes created by c_rehash so that certificates are not recognized by OpenSSL
- Try establishing an smtp connection to the server, fail with result "can not get issuer" which is fine
- Add hashes to the certificate directory usin c_rehash utility and try to connect to smtp server again, it fails with the same reason although certificates are now correctly setup
- Wait one minute or so and try to connect again, then connection to the smtp server is successful

same scenario with ftp works just fine, it is able to connect with correct certificates immediately after they are fixed.

The problem can not be server I think since I am disabling session resumption and also session reuse.

Do you have any idea why there is no problem with ftp but issue persists for smtp? It looks to me they are using same infratructure for ssl communication.

long shots are welcome :)

-------------------------------------------------------------------
List admin: http://cool.haxx.se/list/listinfo/curl-library
Etiquette: http://curl.haxx.se/mail/etiquette.html
Received on 2012-05-02