curl / Mailing Lists / curl-library / Single Mail
Buy commercial curl support from WolfSSL. We help you work out your issues, debug your libcurl applications, use the API, port to new platforms, add new features and more. With a team lead by the curl founder himself.

Re: CURLOPT_SSL_VERIFYPEER - multiple paths

From: Daniel Stenberg via curl-library <curl-library_at_cool.haxx.se>
Date: Thu, 2 Jul 2020 12:09:35 +0200 (CEST)

On Thu, 2 Jul 2020, Vermeire, Baudewijn via curl-library wrote:

> I am now testing the connection by setting
> curl_easy_setopt( theCurlHandle, CURLOPT_SSL_VERIFYPEER, 1);

Which libcurl version using which TLS library + version on what platform?

> It reports error X509_V_ERR_SELF_SIGNED_CERT_IN_CHAIN

"It" being...? libcurl certainly doesn't return that. It sounds like an
OpenSSL function returned that?

> investigation learns that certificate has 2 paths which 1 of them if valid
> and other has 'self signed cert'. How can is setup curl lib so that it
> 'VERIFYPEER' , so that connection succeeds if there is still 'a valid path';
> despite some that having error?

This sounds like a TLS library problem.

> Please be advised that this email may contain confidential information.

Don't email confidential information to public mailing lists!

-- 
  / daniel.haxx.se | Commercial curl support up to 24x7 is available!
                   | Private help, bug fixes, support, ports, new features
                   | https://www.wolfssl.com/contact/
-------------------------------------------------------------------
Unsubscribe: https://cool.haxx.se/list/listinfo/curl-library
Etiquette:   https://curl.haxx.se/mail/etiquette.html
Received on 2020-07-02