At 2010-12-10 16:07:46，"Daniel Stenberg" <[email protected]> wrote: >On Fri, 10 Dec 2010, 张绪峰 wrote: > >>> You can get the one Firefox uses from here: >>> >>> http://curl.haxx.se/docs/caextract.html >> >> Thanks for your help, I have just tried, still doesn't work. when I run >> "curl --cacert cacert.pem https://bugzilla.mozilla.org";, it got following >> output: curl: (60) Peer certificate cannot be authenticated with known CA >> certificates More details here: http://curl.haxx.se/docs/sslcerts.html > >... as Kamil explained previously, NSS does not (yet) support loading PEM >files like that but needs a patch for it (that Fedora has applied on the NSS >they ship). > >So I believe the solutions to have to select from are that you either don't >use PEM certificates with NSS, or you arrange your NSS library to have PEM >support. I find there is libnsspem.so library in my system, so why NSS can't support PEM format? Thanks, Xufeng Zhang > >-- > > / daniel.haxx.se
------------------------------------------------------------------- List admin: http://cool.haxx.se/list/listinfo/curl-library Etiquette: http://curl.haxx.se/mail/etiquette.html
