[Solved] Re: CA Bundle problem

El mar, 08-03-2011 a las 13:37 +0100, Daniel Stenberg escribió:
> On Tue, 8 Mar 2011, Devel wrote:
> 
> > [root@mail apache]# openssl s_client -CAfile /etc/pki/tls/cert.pem -host
> > www.paypal.com -port 443
> 
> ... OpenSSL can verify that host using that ca bundle.
> 
> > [root@mail apache]# curl -v --cacert /etc/pki/tls/cert.pem
> > * Initializing NSS with certpath: /etc/pki/nssdb
> > * Peer certificate cannot be authenticated with known CA certificates
> 
> ... NSS fails to verify that host. This shows curl was built to use NSS for 
> the SSL stuff and not OpenSSL.
> 
> > Where is the problem?
> 
> First, as you're using the curl command line tool and not PHP I think the 
> curl-users list might be a better place to discuss your problem.
> 
> Then, you're leaving out a busload of info that we need: what Linux distro is 
> this? Did you build libcurl yourself or use one from your distro?
> 

Solved:

NSS does not support some OID that Openssl can use and crash.
Problem is in .../tls/ca-bundle.crt


-- 
Ordenadores, componentes y software: http://www.1pc.es/
Sistemas IT: http://www.precioventa.com/

_______________________________________________
http://cool.haxx.se/cgi-bin/mailman/listinfo/curl-and-php