Can't get curl to accept my self-signed root certificate
Ryan Schmidt
ryandesign at macports.org
Sat Oct 3 16:04:00 PDT 2009
On Oct 3, 2009, at 10:36, Bjoern Guenzel wrote:
> I had this working for a short while in the end of July, but then an
> update to the curl port broke it: when I try to access the url of my
> git repository, curl answers with
>
> curl: (51) SSL peer certificate or SSH remote key was not OK
>
> It is working fine on my Linux books, so I assume the configuration
> of the cacerts is the problem.
>
> I have used curl-config --ca to identify the file curl uses to look
> for the root certificate. It points to /opt/local/share/curl/curl-ca-
> bundle.crt and I have added the certificate (exported from Firefox
> as PEM) to that file.
>
> Somehow I have alos modified /usr/share/curl - I think that was the
> location I found before the update broke things. The update also
> overwrote the ca file I had modified (which was working before).
>
> I have no idea what to try next.
>
> Sometimes curl also gave an error 60
>
> (What I really want is to access the git repository with git, but
> git seems to use curl internally, so I try to get curl to load the
> URL).
>
> I would be very happy if somebody has ideas for fixing this.
I am the maintainer of curl in MacPorts but I have not used the
functions you're using so I don't know how to help. You may want to
write to the curl mailing list instead.
More information about the macports-users
mailing list