Ubuntu 10.04/CURL: How do I fix/update the CA Bundle?
Posted
by Nick
on Server Fault
See other posts from Server Fault
or by Nick
Published on 2010-06-14T18:30:55Z
Indexed on
2010/06/14
18:33 UTC
Read the original article
Hit count: 225
I recently upgraded our server from 8.04 to 10.04, and all the software along with it.
From what I've found online, it seems that the new version of CURL doesn't include a CA bundle, and, as a result, fails to verify that the certificate of the server you're connecting to is signed by a valid authority.
The actual error is:
CURL error: SSL certificate problem, verify that the CA cert is OK. Details: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE: certificate verify failed
Some palces I've found suggest manually specifying a CA file or disabling the check altogether by setting an option when you call CURL, but I'd much rather fix the issue globally, rather than having to modify each application's CURL calls.
Is there a way to fix CURL's CA problem server-wide so that all of the existing application code works as is without needing to be modified?
© Server Fault or respective owner