search

Kdyby / CurlCaBundle

[DEPRECATED] Use composer/ca-bundle instead
Other
17 stars 0 forks source link

Curl with GNUTLS fails to validate domain name. #2

Open hrach opened 8 years ago

hrach commented 8 years ago

This is more info bug than a bug report. If php is compiled with curl based on gnu tls (not open ssl), curl is unable to validate domain name properly. I'm not 100% sure it's the reason, but it's the only difference between many machines and the problematic one.

The error is cURL error 60: server certificate verification failed. CAfile: /home/ubuntu/my-project/vendor/kdyby/curl-ca-bundle/src/ca-bundle.crt CRLfile: none (see http://curl.haxx.se/libcurl/c/libcurl-errors.html)

This buggy version of php/curl is present on Circle CI. I'm just thinking, isn't possible that such version of ssl lib in curl isn't able to read ca-bundler properly?

fprochazka commented 8 years ago

To be honest, I have no idea. As you can see in the readme, I'm using the extractor from http://curl.haxx.se/docs/caextract.html ... so it would make sense, that the problem is with the gnu tls.