CURLOPT_ISSUERCERT(3) curl_easy_setopt options CURLOPT_ISSUERCERT(3)NAME
CURLOPT_ISSUERCERT - issuer SSL certificate filename
SYNOPSIS
#include <curl/curl.h>
CURLcode curl_easy_setopt(CURL *handle, CURLOPT_ISSUERCERT, char *file);
DESCRIPTION
Pass a char * to a zero terminated string naming a file holding a CA certificate in PEM format. If the option is set, an additional check
against the peer certificate is performed to verify the issuer is indeed the one associated with the certificate provided by the option.
This additional check is useful in multi-level PKI where one needs to enforce that the peer certificate is from a specific branch of the
tree.
This option makes sense only when used in combination with the CURLOPT_SSL_VERIFYPEER(3) option. Otherwise, the result of the check is not
considered as failure.
A specific error code (CURLE_SSL_ISSUER_ERROR) is defined with the option, which is returned if the setup of the SSL/TLS session has failed
due to a mismatch with the issuer of peer certificate (CURLOPT_SSL_VERIFYPEER(3) has to be set too for the check to fail). (Added in
7.19.0)
The application does not have to keep the string around after setting this option.
DEFAULT
NULL
PROTOCOLS
All TLS-based protocols
EXAMPLE
TODO
AVAILABILITY
If built TLS enabled
RETURN VALUE
Returns CURLE_OK if the option is supported, CURLE_UNKNOWN_OPTION if not, or CURLE_OUT_OF_MEMORY if there was insufficient heap space.
SEE ALSO CURLOPT_CRLFILE(3), CURLOPT_SSL_VERIFYPEER(3),
libcurl 7.54.0 December 21, 2016 CURLOPT_ISSUERCERT(3)
Check Out this Related Man Page
CURLOPT_CRLFILE(3) curl_easy_setopt options CURLOPT_CRLFILE(3)NAME
CURLOPT_CRLFILE - specify a Certificate Revocation List file
SYNOPSIS
#include <curl/curl.h>
CURLcode curl_easy_setopt(CURL *handle, CURLOPT_CRLFILE, char *file);
DESCRIPTION
Pass a char * to a zero terminated string naming a file with the concatenation of CRL (in PEM format) to use in the certificate validation
that occurs during the SSL exchange.
When curl is built to use NSS or GnuTLS, there is no way to influence the use of CRL passed to help in the verification process. When
libcurl is built with OpenSSL support, X509_V_FLAG_CRL_CHECK and X509_V_FLAG_CRL_CHECK_ALL are both set, requiring CRL check against all
the elements of the certificate chain if a CRL file is passed.
This option makes sense only when used in combination with the CURLOPT_SSL_VERIFYPEER(3) option.
A specific error code (CURLE_SSL_CRL_BADFILE) is defined with the option. It is returned when the SSL exchange fails because the CRL file
cannot be loaded. A failure in certificate verification due to a revocation information found in the CRL does not trigger this specific
error.
The application does not have to keep the string around after setting this option.
DEFAULT
NULL
PROTOCOLS
All TLS-based protocols
EXAMPLE
TODO
AVAILABILITY
Added in 7.19.0
RETURN VALUE
Returns CURLE_OK if the option is supported, CURLE_UNKNOWN_OPTION if not, or CURLE_OUT_OF_MEMORY if there was insufficient heap space.
SEE ALSO CURLOPT_SSL_VERIFYPEER(3), CURLOPT_SSL_VERIFYHOST(3),
libcurl 7.54.0 December 21, 2016 CURLOPT_CRLFILE(3)
Hi,
is it possible to check out the speed limits of a box without a remote peer for netio and stuff?
I transferred 1 Terrabyte last night, which is not really much and need to find the bottleneck. The remote server is soon going to retire, yet I need to copy the 8T to the new machine. This... (9 Replies)
Hi,
I am getting below error when I do
-------------------------------
curl: (60) SSL certificate problem, verify that the CA cert is OK. Details:
error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed
More details here: cURL - Details on Server SSL Certificates... (5 Replies)
Hi, I'm trying to install some libraries, when running the makefile I get an error from the "wget --no check certificate option". I had a look help and the option wasn't listed. Anyone know what I'm missing. (0 Replies)
I have 2 AIX 6.1 systems running on PowerPCs - production and .. .everything else. :p . Until the installation of a TLS certificate in an application, some copying of files ("cloning an environment") and upgrading a listener, sending a kill -15 worked on any script/application, so long as we were... (6 Replies)