topic Re: curl command in Operating System - HP-UX

curl command

kani_1 — Thu, 29 Oct 2009 15:01:47 GMT

on HP 11.11 I used the curl as below which is worked fine

curl -E keys.pem:pass --trace trace10.trc -A "Mozilla/4.0" -o filname -F "userid=12345" \
-F "password=XXXXXXX" -F "recordlength=" -F "recordterminator=CRLF" -F "remotefilename=XXXXXXX.12345" \
https://HOST:PORT/cgi-bin/file-download

If I use same command on HP 11.23 it was failing and getting bellow error

error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed
More details here: http://curl.haxx.se/docs/sslcerts.html

curl performs SSL certificate verification by default, using a "bundle"
of Certificate Authority (CA) public keys (CA certs). If the default
bundle file isn't adequate, you can specify an alternate file
using the --cacert option.
If this HTTPS server uses a certificate signed by a CA represented in
the bundle, the certificate verification probably failed due to a
problem with the certificate (it might be expired, or the name might
not match the domain name in the URL).
If you'd like to turn off curl's verification of the certificate, use
the -k (or --insecure) option.

Could you please help me on this issue is there thing to be changed in the script for the HP 11.23

Re: curl command

Steven Schweda — Thu, 29 Oct 2009 15:41:25 GMT

> on HP 11.11 [...]

> If I use same command on HP 11.23 [...]

On a different system? With a different
cURL version? With a different certificate
file?

The script may be ok, but getting some of the
rest of the environment similar might help.

Re: curl command

kani_1 — Thu, 29 Oct 2009 16:30:49 GMT

hello

I didnot get you

details description?

Re: curl command

Michael Steele_2 — Thu, 29 Oct 2009 16:38:24 GMT

Hi

I think what you are looking at is a change in the certificate from server to server and you have to go back to the certificate owner for a new one.

Have you talked to the receiver and ask what errors he is seeing?

I've done a lot of encryption file transfers and in moving them from a dev to test to prod environment always is a pain, especially with the certs. and the version.

The previouis responder asked for verification of the same version of curl on both machines? I've seen this type of failure as well. But this is an indication of your cert key being out of date.

Re: curl command

Steven Schweda — Thu, 29 Oct 2009 17:05:16 GMT

> I didnot get you
>
> details description?

Same here.

"curl --version" on both systems?

I don't know where cURL keeps its certificate
file(s), but it should be documented
somewhere. If the certificate files on the
systems are different, then you might get
complaints about certificates on one system.