10-29-2009 08:01 AM
curl -E keys.pem:pass --trace trace10.trc -A "Mozilla/4.0" -o filname -F "userid=12345" \
-F "password=XXXXXXX" -F "recordlength=" -F "recordterminator=CRLF" -F "remotefilename=XXXXXXX.12345" \
If I use same command on HP 11.23 it was failing and getting bellow error
error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed
More details here: http://curl.haxx.se/docs/sslcerts.html
curl performs SSL certificate verification by default, using a "bundle"
of Certificate Authority (CA) public keys (CA certs). If the default
bundle file isn't adequate, you can specify an alternate file
using the --cacert option.
If this HTTPS server uses a certificate signed by a CA represented in
the bundle, the certificate verification probably failed due to a
problem with the certificate (it might be expired, or the name might
not match the domain name in the URL).
If you'd like to turn off curl's verification of the certificate, use
the -k (or --insecure) option.
Could you please help me on this issue is there thing to be changed in the script for the HP 11.23
10-29-2009 08:41 AM
> If I use same command on HP 11.23 [...]
On a different system? With a different
cURL version? With a different certificate
The script may be ok, but getting some of the
rest of the environment similar might help.
10-29-2009 09:38 AM
I think what you are looking at is a change in the certificate from server to server and you have to go back to the certificate owner for a new one.
Have you talked to the receiver and ask what errors he is seeing?
I've done a lot of encryption file transfers and in moving them from a dev to test to prod environment always is a pain, especially with the certs. and the version.
The previouis responder asked for verification of the same version of curl on both machines? I've seen this type of failure as well. But this is an indication of your cert key being out of date.
10-29-2009 10:05 AM
> details description?
"curl --version" on both systems?
I don't know where cURL keeps its certificate
file(s), but it should be documented
somewhere. If the certificate files on the
systems are different, then you might get
complaints about certificates on one system.