01-10-2011
10 More Discussions You Might Find Interesting
1. UNIX for Advanced & Expert Users
Hello all-
I'm (hopefully) trying to replace a WS_FTP (Windows program) job with a curl command in a script on UNIX.
In short, this process has been in place for some time, and in curl I am getting directory perm issues, which does not seem to be accurate, since this process has been in place... (2 Replies)
Discussion started by: prestonatwork
2 Replies
2. Shell Programming and Scripting
I hope that I can trap curl errors, and have my shell script error out and quit if curl has any sort of problem.
For example, I have the following command in my shell script:
curl --trace -n -v --ftp-ssl ftp://xxx.xxx.xxx.xxx:2122 --user user:password -o /tmp/file.txt
Works great, except... (2 Replies)
Discussion started by: prestonatwork
2 Replies
3. UNIX for Advanced & Expert Users
Hi,
I have Apache running with the certificates installed.
I need a "unix curl" command to download and display remote server certificate.
Kindly help.
Note: Apache has ""SSLVerifyClient require" set in its configuration. (3 Replies)
Discussion started by: mohtashims
3 Replies
4. Shell Programming and Scripting
Hi
i am trying to open HTTP by curl command.
i am tryng to do that from command or script BASH.
also iptables is off
it doesnt work i am getting an error:
curl: (7) coudn't connect to host
the scipt is:
#! /bin/bash
curl http://www.cnn.com (1 Reply)
Discussion started by: zigizag
1 Replies
5. UNIX for Dummies Questions & Answers
I was building my code base firing ./configure and it gave me error:
configure: error: "audit system headers required (PKG: audit-devel)"
I tried installing audit-devel
# zypper in audit-devel
It now gives me new error:
Restoring system sources...
Please insert media # 1 and type 'y'... (1 Reply)
Discussion started by: rupeshkp728
1 Replies
6. Red Hat
Hi guys,
I'm trying to generate a key using the genkey command in centos 6.4 and RHEL6.4, Every thing seems to go cool but I get this error message bad certificate request error -8016 and no key/cert is generated. I don't want use the many openssl(s) commands instead since genkey is a shourtcut... (4 Replies)
Discussion started by: leo_ultra_leo
4 Replies
7. Red Hat
In my RHEL 5.3, i686 server, I am facing the following error, whenever I am using any yum command -
"up2date_client.up2dateErrors.SSLCertificateVerifyFailedError: The certificate is expired. Please ensure you have the correct certificate and your system time is correct."
Please help (2 Replies)
Discussion started by: atanubanerji
2 Replies
8. SCO
Hello I want to use the Curl and gives me this error.
Can someone help me out
# curl http : // www .google . es
dynamic linker: curl: binder error: symbol not... (3 Replies)
Discussion started by: fersys
3 Replies
9. UNIX for Advanced & Expert Users
:rolleyes:I am trying to setup all certificate based client-server environment in Linux using vsftpd and curl with openssl.
I would like to make a user access with vsftpd certificate and user own client certificate (self-signed) with private/public key.
I don't see google posts about the my plan... (4 Replies)
Discussion started by: gogogo
4 Replies
10. Web Development
Good afternnon. I need your help please to understand the basics of curl command to test web services.
Ive heard i can test a web service using this command,so:
curl http://glb_osb_fs.nh.inet:7110/serverglobal/services/StrategicPlanning/NotifyMNPAction_v1
it yields some errors, i would... (5 Replies)
Discussion started by: alexcol
5 Replies
LEARN ABOUT MOJAVE
curlopt_ssl_verifypeer
CURLOPT_SSL_VERIFYPEER(3) curl_easy_setopt options CURLOPT_SSL_VERIFYPEER(3)
NAME
CURLOPT_SSL_VERIFYPEER - verify the peer's SSL certificate
SYNOPSIS
#include <curl/curl.h>
CURLcode curl_easy_setopt(CURL *handle, CURLOPT_SSL_VERIFYPEER, long verify);
DESCRIPTION
Pass a long as parameter to enable or disable.
This option determines whether curl verifies the authenticity of the peer's certificate. A value of 1 means curl verifies; 0 (zero) means
it doesn't.
When negotiating a TLS or SSL connection, the server sends a certificate indicating its identity. Curl verifies whether the certificate is
authentic, i.e. that you can trust that the server is who the certificate says it is. This trust is based on a chain of digital signa-
tures, rooted in certification authority (CA) certificates you supply. curl uses a default bundle of CA certificates (the path for that is
determined at build time) and you can specify alternate certificates with the CURLOPT_CAINFO(3) option or the CURLOPT_CAPATH(3) option.
When CURLOPT_SSL_VERIFYPEER(3) is enabled, and the verification fails to prove that the certificate is authentic, the connection fails.
When the option is zero, the peer certificate verification succeeds regardless.
Authenticating the certificate is not enough to be sure about the server. You typically also want to ensure that the server is the server
you mean to be talking to. Use CURLOPT_SSL_VERIFYHOST(3) for that. The check that the host name in the certificate is valid for the host
name you're connecting to is done independently of the CURLOPT_SSL_VERIFYPEER(3) option.
WARNING: disabling verification of the certificate allows bad guys to man-in-the-middle the communication without you knowing it. Disabling
verification makes the communication insecure. Just having encryption on a transfer is not enough as you cannot be sure that you are commu-
nicating with the correct end-point.
DEFAULT
By default, curl assumes a value of 1.
PROTOCOLS
All TLS based protocols: HTTPS, FTPS, IMAPS, POP3S, SMTPS etc.
EXAMPLE
CURL *curl = curl_easy_init();
if(curl) {
curl_easy_setopt(curl, CURLOPT_URL, "https://example.com");
/* Set the default value: strict certificate check please */
curl_easy_setopt(curl, CURLOPT_SSL_VERIFYPEER, 1L);
curl_easy_perform(curl);
}
AVAILABILITY
If built TLS enabled.
RETURN VALUE
Returns CURLE_OK if the option is supported, and CURLE_UNKNOWN_OPTION if not.
SEE ALSO
CURLOPT_SSL_VERIFYHOST(3), CURLOPT_PROXY_SSL_VERIFYPEER(3), CURLOPT_PROXY_SSL_VERIFYHOST(3),
libcurl 7.54.0 February 09, 2017 CURLOPT_SSL_VERIFYPEER(3)