I recently built curl 7.46.0 with mbedTLS (--with-mbedtls):
curl 7.46.0 (x86_64-pc-mingw32) libcurl/7.46.0 mbedTLS/2.2.0 zlib/1.2.8
Protocols: http https
Features: Largefile SSL libz
Any website I try to access via https I get BADCERT_NOT_TRUSTED. Take
test.com for example:
curl -Ss --cacert curl-ca-bundle.crt https://test.com
curl: (51) Cert verify failed: BADCERT_NOT_TRUSTED
The root CA 'USERTrust RSA Certification Authority' [1] is in the bundle
but verification fails. If I use just the root CA verification fails. If
I use just the server-sent intermediate it will verify fine, as
expected. In limited testing this appears to be true of other websites,
like example.com.
Does anyone have mbedTLS working in curl 7.46.0?
[1]: https://github.com/bagder/ca-bundle/blob/master/ca-bundle.crt#L3603
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
-------------------------------------------------------------------
List admin: http://cool.haxx.se/list/listinfo/curl-library
Etiquette: http://curl.haxx.se/mail/etiquette.html
