> On Nov 14, 2017, at 1:10 PM, Ray Satiro via curl-library
> <[email protected]> wrote:
>
> On 11/13/2017 6:43 PM, Kelly Graus wrote:
>> I’ve been using libcurl in an OS X app for several years, linking against
>> the system provided dynamic library. Recently we wanted to add the ability
>> to do a multipart form post, which requires a newer version of libcurl than
>> is provided by Apple. So I downloaded the source and compiled it using the
>> following options:
>>
>> ./configure --prefix=/usr/local/curl --with-darwinssl --enable-static
>> --disable-ldap --disable-ldaps
>>
>> I then link against the static library that is built, and everything works
>> great.
>>
>> However, when I build a release and run it on a different machine, I receive
>> the following error whenever I try to download a file using HTTPS: "Problem
>> with the SSL CA cert (path? access rights?).”
>>
>> I’ve tried in on two test machines, both of which are running slightly older
>> versions of OS X than what I used to compile with (10.11 and 10.12, where
>> I’m using 10.13). I don’t have another 10.13 machine right now to test if
>> this is related to the OS version.
>
> What is the curl_version() and turn on CURLOPT_VERBOSE [1] to check for
> relevant information.
>
> [1]: https://curl.haxx.se/libcurl/c/CURLOPT_VERBOSE.html
> <https://curl.haxx.se/libcurl/c/CURLOPT_VERBOSE.html>
Using curl_version_info, I get the following:
libcurl 7.56.1
ssl: SecureTransport
host: x86_64-apple-darwin17.2.0
protocols: dict, file, ftp, ftps, gopher, http, https, imap, imaps, pop3,
pop3s, rtsp, smb, smbs, smtp, smtps, telnet, tftp
features: IPv6, SSL, libz, NTLM, asynchronous DNS, large file, NTLM-WB, Unix
Sockets
With verbose output enabled, I see the underlying error is "SSL: can't load CA
certificate file /etc/ssl/cert.pem.” I’ve verified that this file is missing
on the machines that don’t work. I’m looking into where those files are
supposed to be from, but if anyone knows it would be greatly appreciated!
-------------------------------------------------------------------
Unsubscribe: https://cool.haxx.se/list/listinfo/curl-library
Etiquette: https://curl.haxx.se/mail/etiquette.html