Re: [1Eisfair1] cURL-Problem

Hallo

Am 2010-12-05 23:24, schrieb Juergen Edner:

> ich vermute ein Problem mit dem Zertifikat von signin.ebay.com,
> da dieses bei mir als erstes angezeigt wird. Siehe hier:
>
> * Connected to signin.ebay.com (66.135.202.140) port 443 (#0)
> * successfully set certificate verify locations:
> *   CAfile: none
>    CApath: /etc/ssl/certs
> * SSLv3, TLS handshake, Client hello (1):
> * SSLv3, TLS handshake, Server hello (2):
> * SSLv3, TLS handshake, CERT (11):
> * SSLv3, TLS handshake, Server finished (14):
> * SSLv3, TLS handshake, Client key exchange (16):
> * SSLv3, TLS change cipher, Client hello (1):
> * SSLv3, TLS handshake, Finished (20):
> * SSLv3, TLS change cipher, Client hello (1):
> * SSLv3, TLS handshake, Finished (20):
> * SSL connection using RC4-MD5
> * Server certificate:
> *        subject: 1.3.6.1.4.1.311.60.2.1.3=US;
> 1.3.6.1.4.1.311.60.2.1.2=Delaware; businessCategory=V1.0, Clause 5.(b);
> serialNumber=2871352; C=US; postalCode=95125; ST=California; L=San Jose;
> street=2145 Hamilton Ave; O=eBay Inc.; OU=Site Operations;
> CN=signin.ebay.com
> *        start date: 2009-01-08 00:00:00 GMT
> *        expire date: 2011-01-23 23:59:59 GMT
> *        subjectAltName: signin.ebay.com matched

wird hier auch so aufgeloest

eis:/ # curl --capath /etc/ssl/certs -v 
https://signin.ebay.com/ws/eBayISAPI.dll?SignIn

* About to connect() to signin.ebay.com port 443 (#0)
*   Trying 66.211.181.81... connected
* Connected to signin.ebay.com (66.211.181.81) port 443 (#0)
* successfully set certificate verify locations:
*   CAfile: none
   CApath: /etc/ssl/certs
* SSLv3, TLS handshake, Client hello (1):
* SSLv3, TLS handshake, Server hello (2):
* SSLv3, TLS handshake, CERT (11):
* SSLv3, TLS handshake, Server finished (14):
* SSLv3, TLS handshake, Client key exchange (16):
* SSLv3, TLS change cipher, Client hello (1):
* SSLv3, TLS handshake, Finished (20):
* SSLv3, TLS change cipher, Client hello (1):
* SSLv3, TLS handshake, Finished (20):
* SSL connection using RC4-MD5
* Server certificate:
*        subject: 1.3.6.1.4.1.311.60.2.1.3=US; 
1.3.6.1.4.1.311.60.2.1.2=Delaware; businessCategory=V1.0, Clause 
5.(b); serialNumber=2871352; C=US; postalCode=95125; ST=California; 
L=San Jose; street=2145 Hamilton Ave; O=eBay Inc.; OU=Site 
Operations; CN=signin.ebay.com
*        start date: 2009-01-08 00:00:00 GMT
*        expire date: 2011-01-23 23:59:59 GMT
*        subjectAltName: signin.ebay.com matched
*        issuer: C=US; O=VeriSign, Inc.; OU=VeriSign Trust Network; 
OU=Terms of use at https://www.verisign.com/rpa (c)06; CN=VeriSign 
Class 3 Extended Validation SSL CA


ehmm, hast Du

9. Download ca certificate bundle

ausgefuehrt?

Holger