Re: CA Bundle problem

El mar, 08-03-2011 a las 13:37 +0100, Daniel Stenberg escribió:
> On Tue, 8 Mar 2011, Devel wrote:
> 
> > [root@mail apache]# openssl s_client -CAfile /etc/pki/tls/cert.pem
> -host
> > www.paypal.com -port 443
> 
> ... OpenSSL can verify that host using that ca bundle.
> 
> > [root@mail apache]# curl -v --cacert /etc/pki/tls/cert.pem
> > * Initializing NSS with certpath: /etc/pki/nssdb
> > * Peer certificate cannot be authenticated with known CA
> certificates
> 
> ... NSS fails to verify that host. This shows curl was built to use
> NSS for 
> the SSL stuff and not OpenSSL.
> 
> > Where is the problem?
> 
> First, as you're using the curl command line tool and not PHP I think
> the 
> curl-users list might be a better place to discuss your problem.

Well could be possible. Problem was detected in PHP program,
libcurl, ....

> Then, you're leaving out a busload of info that we need: what Linux
> distro is 
> this? Did you build libcurl yourself or use one from your distro?
> 

fedora core 14


Regards,



-- 
Ordenadores, componentes y software: http://www.1pc.es/
Sistemas IT: http://www.precioventa.com/

_______________________________________________
http://cool.haxx.se/cgi-bin/mailman/listinfo/curl-and-php