On 5/8/2015 11:28 AM, Volker Schmid wrote:
Hello,
not sure if this answer is correctly assigned. Sorry.
Hi,
This snippet from CURLOPT_CAPATH doc might be relevant:
"If libcurl is built against OpenSSL, the certificate directory must be
prepared using the openssl c_rehash utility. "
HTH,
-Vadim
I don't think that curl on MacOS (Yosemite) is compiled against
OpenSSL. This is what otool is saying on my system:
otool -L /usr/bin/curl
/usr/bin/curl: /usr/lib/libcurl.4.dylib (compatibility version 7.0.0,
current version 8.0.0)
/usr/lib/libz.1.dylib (compatibility version 1.0.0, current version
1.2.5)
/usr/lib/libSystem.B.dylib (compatibility version 1.0.0, current
version 1197.1.1)
otool -L /usr/lib/libcurl.4.dylib
/usr/lib/libcurl.4.dylib: /usr/lib/libcurl.4.dylib (compatibility
version 7.0.0, current version 8.0.0)
/System/Library/Frameworks/Security.framework/Versions/A/Security
(compatibility version 1.0.0, current version 55471.14.7)
/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation
(compatibility version 150.0.0, current version 855.17.0)
/System/Library/Frameworks/LDAP.framework/Versions/A/LDAP
(compatibility version 1.0.0, current version 2.4.0)
/System/Library/Frameworks/Kerberos.framework/Versions/A/Kerberos
(compatibility version 5.0.0, current version 6.0.0)
/usr/lib/libz.1.dylib (compatibility version 1.0.0, current version
1.2.5)
/usr/lib/libSystem.B.dylib (compatibility version 1.0.0, current
version 1197.1.1)
It works on three systems, on one it fails. I believe that c_rehash
was not used on the three systems before.
Apple's security framework relies on an OS central database of
certificates from what I've read [1]. Can you post a way to reproduce?
Maybe someone else on the list that uses Mac can try the website to see
if they get the same result. Why don't you post curl -V, and the curl
verbose output here as well.
[1]: http://curl.haxx.se/docs/ssl-compared.html
-------------------------------------------------------------------
List admin: http://cool.haxx.se/list/listinfo/curl-library
Etiquette: http://curl.haxx.se/mail/etiquette.html
