On Fri, 10 Dec 2010, 张绪峰 wrote:
You can get the one Firefox uses from here:
http://curl.haxx.se/docs/caextract.html
Thanks for your help, I have just tried, still doesn't work. when I run
"curl --cacert cacert.pem https://bugzilla.mozilla.org";, it got following
output: curl: (60) Peer certificate cannot be authenticated with known CA
certificates More details here: http://curl.haxx.se/docs/sslcerts.html
... as Kamil explained previously, NSS does not (yet) support loading PEM
files like that but needs a patch for it (that Fedora has applied on the NSS
they ship).
So I believe the solutions to have to select from are that you either don't
use PEM certificates with NSS, or you arrange your NSS library to have PEM
support.
--
/ daniel.haxx.se
-------------------------------------------------------------------
List admin: http://cool.haxx.se/list/listinfo/curl-library
Etiquette: http://curl.haxx.se/mail/etiquette.html
