SSL certificate problem, verify that the CA cert is OK.

Hi All,

OK - first of all, I know this is a common problem.
I have read http://curl.haxx.se/docs/sslcerts.html a million times and done
everything in it.
I've also read the FAQ and spent about 10 hours on this problem.
So please, do not flame me before even reading this!  ;^)

My set up :
  * Apache 2.2.15
  * PHP55.2.13
  * openSSL 0.9.8
  * OS WinXP
  * HTTPS is working on my server

My problem:
Getting the following error when using cURL with HTTPS

"SSL certificate problem, verify that the CA cert is OK. Details:
error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify
failed (Error No. 60)"

What I have done so far:
1. I have downloaded the correct cacert.pem
2. Updated my ssl.conf to state:
SSLCACertificatePath "C:/Apache2.2/conf/ssl/"
SSLCACertificateFile "C:/Apache2.2/conf/ssl/cacert.pem"
So I'm pointing SSL to use the correct CA Cert file.
Restarted my server, but still am getting above error.

When I use:
curl_setopt($ch, CURLOPT_CAINFO, "c:/apache2.2/conf/ssl/cacert.pem");

In the code, I do not get the error - so that cacert.pem is obviously the
right one.

The PHP modules I am using are not coded by me and I don't want to change
the code at all.
I just want to be able to set up the server so that whenever cURL does the
peer SSL check then it reads the correct CA Cert as defined in the ssl.conf.
But it doesn't seem to.

There must be something that I am missing in the configuration, but not sure
what else there is.
I've read all the walkthroughs and FAQs and crib notes.. how do I get curl
to look at the right cacert.pem without hard coding it in?



Thanks so much for your help in advance!



Ty

_______________________________________________
http://cool.haxx.se/cgi-bin/mailman/listinfo/curl-and-php