Hello,
         I am using PEM file and following set of APIs on my windows-app.

    curl_easy_setopt( curl_handle, CURLOPT_SSLCERTTYPE,"PEM" );
    curl_easy_setopt( curl_handle, CURLOPT_CAINFO, certFile ); //CA Cert
Bundle
    curl_easy_setopt( curl_handle, CURLOPT_SSL_VERIFYPEER, 1 );
    curl_easy_setopt( curl_handle, CURLOPT_SSL_VERIFYHOST, 1 );

Its not trusting the certificates of https://in.yahoo.com/ and one more
https site.
If i open both of these sites in firefox it does open

Certificate issuer for both websites that are not opening are following

Yahoo => VeriSign Class 3 Secure Server CA - G3
Another HTTPS site => Entrust Certification Authority - L1C

I have taken the latest PEM file from
http://curl.haxx.se/docs/caextract.html

-------------------------------------------------------------------
List admin: http://cool.haxx.se/list/listinfo/curl-library
Etiquette: http://curl.haxx.se/mail/etiquette.html
Received on 2014-12-09