> Date: Wed, 5 Sep 2012 21:04:27 +0200 > From: [email protected] > To: [email protected] > Subject: Re: SSL3_READ_BYTES:sslv3 error when disabled verify issuer and hosts > > On 05-09-12 19:15, Sidde Gowda wrote: > > Hi All > > > > It is strange to me. I have disabled verify issuer and hosts but still > > seeing below error. Any idea? > > > > * About to connect() to 172.17.0.11 port 8443 (#0) > > * Trying 172.17.0.11... > > * connected > > * Connected to 172.17.0.11 (172.17.0.11) port 8443 (#0) > > * error setting certificate verify locations, continuing anyway: > > * CAfile: /hdp/cert/local/ca/server_cert.crt > > CApath: none > > * error:14094412:SSL routines:SSL3_READ_BYTES:sslv3 alert bad certificate > > * Closing connection #0 > > * SSL connect error > > > > Regards > > Sidde > > > > What's in the /hdp/cert/local/ca/server_cert.crt file? May I freely assume > this is the server certificate? If so, I wonder why. > > How did you disable it? libucurl settings or curl -k? > > > Oscar > > Hi
Thanks. Yes, it is server cert and I am using libcurl options. The reason I found was, server port number (8443) in the URI was expecting client certificate always. No matter whether we have enabled or disabled in libcurl (server requirements I guess). For simple https without needing a client certificate, server had another port (8442). When I used it, verifier false worked as expected. Otherwise no. Regards Sidde > > > > > > ------------------------------------------------------------------- > > List admin: http://cool.haxx.se/list/listinfo/curl-library > > Etiquette: http://curl.haxx.se/mail/etiquette.html > > > > ------------------------------------------------------------------- > List admin: http://cool.haxx.se/list/listinfo/curl-library > Etiquette: http://curl.haxx.se/mail/etiquette.html
------------------------------------------------------------------- List admin: http://cool.haxx.se/list/listinfo/curl-library Etiquette: http://curl.haxx.se/mail/etiquette.html
