Ubuntu 10.04/CURL: How do I fix/update the CA Bundle?
- by Nick
I recently upgraded our server from 8.04 to 10.04, and all the software along with it.
From what I've found online, it seems that the new version of CURL doesn't include a CA bundle, and, as a result, fails to verify that the certificate of the server you're connecting to is signed by a valid authority.
The actual error is:
CURL error: SSL certificate problem, verify that the CA cert is OK.
Details: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:
certificate verify failed
Some palces I've found suggest manually specifying a CA file or disabling the check altogether by setting an option when you call CURL, but I'd much rather fix the issue globally, rather than having to modify each application's CURL calls.
Is there a way to fix CURL's CA problem server-wide so that all of the existing application code works as is without needing to be modified?