<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" class="elementToProof">
<span style="font-size:12pt;margin:0px;orphans:2;widows:2"><span class="ContentPasted0" style="font-size: 14.6667px; margin: 0px; display: inline !important; color: rgb(36, 36, 36); background-color: rgb(255, 255, 255);">Thanks for your answer, and your help.</span></span>
<div style="font-size:12pt;margin:0px;orphans:2;widows:2"><span class="ContentPasted0" style="font-size: 14.6667px; margin: 0px; display: inline !important; color: rgb(36, 36, 36); background-color: rgb(255, 255, 255);"><br class="ContentPasted0">
</span></div>
<div style="font-size:12pt;margin:0px;orphans:2;widows:2"><span class="ContentPasted0" style="font-size: 14.6667px; margin: 0px; display: inline !important; color: rgb(36, 36, 36); background-color: rgb(255, 255, 255);">I'm confused, really.</span></div>
<div style="font-size:12pt;margin:0px;orphans:2;widows:2"><span class="ContentPasted0" style="font-size: 14.6667px; margin: 0px; display: inline !important; color: rgb(36, 36, 36); background-color: rgb(255, 255, 255);"><br class="ContentPasted0">
</span></div>
<div style="font-size:12pt;margin:0px;orphans:2;widows:2"><span class="ContentPasted0" style="font-size: 14.6667px; margin: 0px; display: inline !important; color: rgb(36, 36, 36); background-color: rgb(255, 255, 255);">I use certificates since many years,
All my problems are due to terrible error.</span></div>
<div style="font-size:12pt;margin:0px;orphans:2;widows:2"><span class="ContentPasted0" style="font-size: 14.6667px; margin: 0px; display: inline !important; color: rgb(36, 36, 36); background-color: rgb(255, 255, 255);"><br class="ContentPasted0">
</span></div>
<div style="font-size:12px;font-family:"Segoe UI Web (West European)", "Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue", sans-serif;margin:0px;orphans:2;widows:2">
<font style="color: rgb(36, 36, 36);"><span style="font-size:14.6667px;margin:0px" class="ContentPasted0">In my Debian 11 server with Apache, I'v set CA certificates and server certificates. All have been created this week for new tests.</span></font></div>
<div style="font-size:12px;font-family:"Segoe UI Web (West European)", "Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue", sans-serif;margin:0px;orphans:2;widows:2">
<font style="color: rgb(36, 36, 36);"><span style="font-size:14.6667px;margin:0px"><br class="ContentPasted0">
</span></font></div>
<div style="font-size:12px;font-family:"Segoe UI Web (West European)", "Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue", sans-serif;margin:0px;orphans:2;widows:2">
<font style="color: rgb(36, 36, 36);"><span style="font-size:14.6667px;margin:0px" class="ContentPasted0">On the Windows client, I've set certicates (CA and users) ... created 4 years ago...</span></font></div>
<div style="font-size:12px;font-family:"Segoe UI Web (West European)", "Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue", sans-serif;margin:0px;orphans:2;widows:2">
<font style="color: rgb(36, 36, 36);"><span style="font-size:14.6667px;margin:0px" class="ContentPasted0"><br>
</span></font></div>
<div style="font-size:12px;font-family:"Segoe UI Web (West European)", "Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue", sans-serif;margin:0px;orphans:2;widows:2">
<font style="color: rgb(36, 36, 36);"><span style="font-size:14.6667px;margin:0px" class="ContentPasted0">I use the same scripts, so files have the same names...<br>
</span></font></div>
<div style="font-size:12px;font-family:"Segoe UI Web (West European)", "Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue", sans-serif;margin:0px;orphans:2;widows:2">
<font style="color: rgb(36, 36, 36);"><span style="font-size:14.6667px;margin:0px"><br class="ContentPasted0">
</span></font></div>
<div style="font-size:12px;font-family:"Segoe UI Web (West European)", "Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue", sans-serif;margin:0px;orphans:2;widows:2">
<font style="color: rgb(36, 36, 36);"><span style="font-size:14.6667px;margin:0px" class="ContentPasted0">So, on Windows, all results were illogical ("weird", sorry).</span></font></div>
<div style="font-size:12px;font-family:"Segoe UI Web (West European)", "Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue", sans-serif;margin:0px;orphans:2;widows:2">
<font style="color: rgb(36, 36, 36);"><span style="font-size:14.6667px;margin:0px"><br class="ContentPasted0">
</span></font></div>
<div style="font-size:12px;font-family:"Segoe UI Web (West European)", "Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue", sans-serif;margin:0px;orphans:2;widows:2">
<font style="color: rgb(36, 36, 36);"><span style="font-size:14.6667px;margin:0px" class="ContentPasted0">I've seen my mistake this afternoon. After having set good certificates on Windows client, all is working fine.</span></font></div>
<div style="font-size:12px;font-family:"Segoe UI Web (West European)", "Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue", sans-serif;margin:0px;orphans:2;widows:2">
<font style="color: rgb(36, 36, 36);"><span style="font-size:14.6667px;margin:0px"><br class="ContentPasted0">
</span></font></div>
<div style="font-size:12px;font-family:"Segoe UI Web (West European)", "Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue", sans-serif;margin:0px;orphans:2;widows:2">
<font style="color: rgb(36, 36, 36);"><span style="font-size:14.6667px;margin:0px" class="ContentPasted0">I'm very sorry. I apologize.</span></font></div>
<div style="font-size:12px;font-family:"Segoe UI Web (West European)", "Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue", sans-serif;margin:0px;orphans:2;widows:2">
<font style="color: rgb(36, 36, 36);"><span style="font-size:14.6667px;margin:0px"><br class="ContentPasted0">
</span></font></div>
<div style="font-size:12px;font-family:"Segoe UI Web (West European)", "Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue", sans-serif;margin:0px;orphans:2;widows:2">
<font style="color: rgb(36, 36, 36);"><span style="font-size:14.6667px;margin:0px" class="ContentPasted0">My question was about curl. It seems to be usefull, but I'm not sure it's the right tool to test the Debian Server and Apache (I use curl on the same server
that hosts the web site).</span></font></div>
<div style="font-size:12px;font-family:"Segoe UI Web (West European)", "Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue", sans-serif;margin:0px;orphans:2;widows:2">
<font style="color: rgb(36, 36, 36);"><span style="font-size:14.6667px;margin:0px"><br class="ContentPasted0">
</span></font></div>
<div style="font-size:12px;font-family:"Segoe UI Web (West European)", "Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue", sans-serif;margin:0px;orphans:2;widows:2">
<font style="color: rgb(36, 36, 36);"><span style="font-size:14.6667px;margin:0px" class="ContentPasted0">I've used curl successfully (each time, all messages seems to be good, and at end the HTML code of the web page appears - see below):</span></font></div>
<div style="font-size:12px;font-family:"Segoe UI Web (West European)", "Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue", sans-serif;margin:0px;orphans:2;widows:2">
<font style="color: rgb(36, 36, 36);"><span style="font-size:14.6667px;margin:0px"><br class="ContentPasted0">
</span></font></div>
<div style="font-size:12px;font-family:"Segoe UI Web (West European)", "Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue", sans-serif;margin:0px;orphans:2;widows:2">
<font style="color: rgb(36, 36, 36);"><span style="font-size:14.6667px;margin:0px" class="ContentPasted0">If Apache don't ask for user authentication:</span></font></div>
<div style="font-size:12px;font-family:"Segoe UI Web (West European)", "Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue", sans-serif;margin:0px;orphans:2;widows:2">
<font style="color: rgb(36, 36, 36);"><span class="ContentPasted1 ContentPasted0" style="font-size:14.6667px;margin:0px">curl -iv --tlsv1.1 --tls-max 1.1 https://www.my_site.fr
<div style="margin:0px"><br class="ContentPasted1 ContentPasted0">
</div>
<div style="margin:0px"><span class="ContentPasted2 ContentPasted0" style="margin: 0px; display: inline !important; background-color: rgb(255, 255, 255);">If Apache asks for user authentication:</span><br class="ContentPasted0">
</div>
<div class="ContentPasted1 ContentPasted0" style="margin:0px">curl -iv --tlsv1.1 --tls-max 1.1 --cert /etc/ssl/certs/Alex.crt --key /etc/ssl/private/Alex.pem https://www.my_site.fr</div>
<br class="ContentPasted0">
</span></font></div>
<div style="font-size:12px;font-family:"Segoe UI Web (West European)", "Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue", sans-serif;margin:0px;orphans:2;widows:2">
<font style="color: rgb(36, 36, 36);"><span class="ContentPasted1 ContentPasted4 ContentPasted0" style="font-size:14.6667px;margin:0px">For "openssl s_client", as you wrote, on Windows 10, I don't find how to use it successfully. It is kind of a shame. This
would probably be useful for testing on Windows without using an Internet browser. Don't bother, I'll figure out how to use, no problems.</span></font></div>
<div style="font-size:12px;font-family:"Segoe UI Web (West European)", "Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue", sans-serif;margin:0px;orphans:2;widows:2">
<font style="color: rgb(36, 36, 36);"><span class="ContentPasted1 ContentPasted4" style="font-size:14.6667px;margin:0px"><br class="ContentPasted0">
</span></font></div>
<div style="font-size:12px;font-family:"Segoe UI Web (West European)", "Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue", sans-serif;margin:0px;orphans:2;widows:2">
<font style="color: rgb(36, 36, 36);"><span class="ContentPasted1 ContentPasted4 ContentPasted0" style="font-size:14.6667px;margin:0px">I'm sorry.</span></font></div>
<div style="font-size:12px;font-family:"Segoe UI Web (West European)", "Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue", sans-serif;margin:0px;orphans:2;widows:2">
<font style="color: rgb(36, 36, 36);"><span class="ContentPasted1 ContentPasted4" style="font-size:14.6667px;margin:0px"><br class="ContentPasted0">
</span></font></div>
<div style="font-size:12px;font-family:"Segoe UI Web (West European)", "Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue", sans-serif;margin:0px;orphans:2;widows:2">
<font style="color: rgb(36, 36, 36);"><span class="ContentPasted1 ContentPasted4 ContentPasted0" style="font-size:14.6667px;margin:0px">Thanks for all.</span></font></div>
<div style="font-size:12px;font-family:"Segoe UI Web (West European)", "Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue", sans-serif;margin:0px;orphans:2;widows:2">
<font style="color: rgb(36, 36, 36);"><span class="ContentPasted1 ContentPasted4" style="font-size:14.6667px;margin:0px"><br class="ContentPasted0">
</span></font></div>
<div style="font-size:12px;font-family:"Segoe UI Web (West European)", "Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue", sans-serif;margin:0px;orphans:2;widows:2">
<font style="color: rgb(36, 36, 36);"><span class="ContentPasted1" style="font-size:14.6667px;margin:0px"><br class="ContentPasted0">
</span></font></div>
<div style="font-size:12px;font-family:"Segoe UI Web (West European)", "Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue", sans-serif;margin:0px;orphans:2;widows:2">
<font style="color: rgb(36, 36, 36);"><span class="ContentPasted1 ContentPasted0" style="font-size:14.6667px;margin:0px">-----------------------------------------------------</span></font></div>
<div style="font-size:12px;font-family:"Segoe UI Web (West European)", "Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue", sans-serif;margin:0px;orphans:2;widows:2">
<font style="color: rgb(36, 36, 36);"><span class="ContentPasted1 ContentPasted0" style="font-size:14.6667px;margin:0px">A successful example of curl use:</span></font></div>
<div style="font-size:12px;font-family:"Segoe UI Web (West European)", "Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue", sans-serif;margin:0px;orphans:2;widows:2">
<font style="color: rgb(36, 36, 36);"><span class="ContentPasted1" style="font-size:14.6667px;margin:0px"><br class="ContentPasted0">
</span></font></div>
<div style="font-size:12px;font-family:"Segoe UI Web (West European)", "Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue", sans-serif;margin:0px;orphans:2;widows:2">
<font style="color: rgb(36, 36, 36);"><span class="ContentPasted1 ContentPasted3 ContentPasted0" style="font-size:14.6667px;margin:0px"># curl -iv --tlsv1.1 --tls-max 1.1 --cert /etc/ssl/certs/Alex.crt --key /etc/ssl/private/Alex.pem https://www.my_site.fr
<div class="ContentPasted3 ContentPasted0" style="margin:0px">* Trying 192.168.0.100:443...</div>
<div class="ContentPasted3 ContentPasted0" style="margin:0px">* Connected to www.my_site.fr (192.168.0.100) port 443 (#0)</div>
<div class="ContentPasted3 ContentPasted0" style="margin:0px">* ALPN, offering h2</div>
<div class="ContentPasted3 ContentPasted0" style="margin:0px">* ALPN, offering http/1.1</div>
<div class="ContentPasted3 ContentPasted0" style="margin:0px">* successfully set certificate verify locations:</div>
<div class="ContentPasted3 ContentPasted0" style="margin:0px">* CAfile: /etc/ssl/certs/ca-certificates.crt</div>
<div class="ContentPasted3 ContentPasted0" style="margin:0px">* CApath: /etc/ssl/certs</div>
<div class="ContentPasted3 ContentPasted0" style="margin:0px">* TLSv1.3 (OUT), TLS handshake, Client hello (1):</div>
<div class="ContentPasted3 ContentPasted0" style="margin:0px">* TLSv1.3 (IN), TLS handshake, Server hello (2):</div>
<div class="ContentPasted3 ContentPasted0" style="margin:0px">* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):</div>
<div class="ContentPasted3 ContentPasted0" style="margin:0px">* TLSv1.3 (IN), TLS handshake, Request CERT (13):</div>
<div class="ContentPasted3 ContentPasted0" style="margin:0px">* TLSv1.3 (IN), TLS handshake, Certificate (11):</div>
<div class="ContentPasted3 ContentPasted0" style="margin:0px">* TLSv1.3 (IN), TLS handshake, CERT verify (15):</div>
<div class="ContentPasted3 ContentPasted0" style="margin:0px">* TLSv1.3 (IN), TLS handshake, Finished (20):</div>
<div class="ContentPasted3 ContentPasted0" style="margin:0px">* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):</div>
<div class="ContentPasted3 ContentPasted0" style="margin:0px">* TLSv1.3 (OUT), TLS handshake, Certificate (11):</div>
<div class="ContentPasted3 ContentPasted0" style="margin:0px">* TLSv1.3 (OUT), TLS handshake, CERT verify (15):</div>
<div class="ContentPasted3 ContentPasted0" style="margin:0px">* TLSv1.3 (OUT), TLS handshake, Finished (20):</div>
<div class="ContentPasted3 ContentPasted0" style="margin:0px">* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384</div>
<div class="ContentPasted3 ContentPasted0" style="margin:0px">* ALPN, server accepted to use http/1.1</div>
<div class="ContentPasted3 ContentPasted0" style="margin:0px">* Server certificate:</div>
<div class="ContentPasted3 ContentPasted0" style="margin:0px">* subject: C=FR; ST=France; L=Paris; O=Entreprise; OU=Factory; CN=www.my_site.fr; emailAddress=mail@my_site.fr</div>
<div class="ContentPasted3 ContentPasted0" style="margin:0px">* start date: Jun 12 08:09:15 2018 GMT</div>
<div class="ContentPasted3 ContentPasted0" style="margin:0px">* expire date: Jun 9 08:09:15 2028 GMT</div>
<div class="ContentPasted3 ContentPasted0" style="margin:0px">* common name: www.my_site.fr (matched)</div>
<div class="ContentPasted3 ContentPasted0" style="margin:0px">* issuer: C=FR; ST=France; L=Paris; O=Entreprise; OU=Factory; CN=CA my_site; emailAddress=admin_ca@my_site.fr</div>
<div class="ContentPasted3 ContentPasted0" style="margin:0px">* SSL certificate verify ok.</div>
<div class="ContentPasted3 ContentPasted0" style="margin:0px">> GET / HTTP/1.1</div>
<div class="ContentPasted3 ContentPasted0" style="margin:0px">> Host: www.my_site.fr</div>
<div class="ContentPasted3 ContentPasted0" style="margin:0px">> User-Agent: curl/7.74.0</div>
<div class="ContentPasted3 ContentPasted0" style="margin:0px">> Accept: */*</div>
<div class="ContentPasted3 ContentPasted0" style="margin:0px">></div>
<div class="ContentPasted3 ContentPasted0" style="margin:0px">* TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):</div>
<div class="ContentPasted3 ContentPasted0" style="margin:0px">* TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):</div>
<div class="ContentPasted3 ContentPasted0" style="margin:0px">* old SSL session ID is stale, removing</div>
<div class="ContentPasted3 ContentPasted0" style="margin:0px">* Mark bundle as not supporting multiuse</div>
<div class="ContentPasted3 ContentPasted0" style="margin:0px">< HTTP/1.1 200 OK</div>
<div class="ContentPasted3 ContentPasted0" style="margin:0px">HTTP/1.1 200 OK</div>
<div class="ContentPasted3 ContentPasted0" style="margin:0px">< Date: Wed, 26 Apr 2023 07:29:17 GMT</div>
<div class="ContentPasted3 ContentPasted0" style="margin:0px">Date: Wed, 26 Apr 2023 07:29:17 GMT</div>
<div class="ContentPasted3 ContentPasted0" style="margin:0px">< Server: Apache/2.4.56 (Debian)</div>
<div class="ContentPasted3 ContentPasted0" style="margin:0px">Server: Apache/2.4.56 (Debian)</div>
<div class="ContentPasted3 ContentPasted0" style="margin:0px">< Last-Modified: Tue, 25 Apr 2023 12:14:52 GMT</div>
<div class="ContentPasted3 ContentPasted0" style="margin:0px">Last-Modified: Tue, 25 Apr 2023 12:14:52 GMT</div>
<div class="ContentPasted3 ContentPasted0" style="margin:0px">< ETag: "bc-5fa281219dadd"</div>
<div class="ContentPasted3 ContentPasted0" style="margin:0px">ETag: "bc-5fa281219dadd"</div>
<div class="ContentPasted3 ContentPasted0" style="margin:0px">< Accept-Ranges: bytes</div>
<div class="ContentPasted3 ContentPasted0" style="margin:0px">Accept-Ranges: bytes</div>
<div class="ContentPasted3 ContentPasted0" style="margin:0px">< Content-Length: 188</div>
<div class="ContentPasted3 ContentPasted0" style="margin:0px">Content-Length: 188</div>
<div class="ContentPasted3 ContentPasted0" style="margin:0px">< Vary: Accept-Encoding</div>
<div class="ContentPasted3 ContentPasted0" style="margin:0px">Vary: Accept-Encoding</div>
<div class="ContentPasted3 ContentPasted0" style="margin:0px">< Content-Type: text/html</div>
<div class="ContentPasted3 ContentPasted0" style="margin:0px">Content-Type: text/html</div>
<div style="margin:0px"><br class="ContentPasted3 ContentPasted0">
</div>
<div class="ContentPasted3 ContentPasted0" style="margin:0px"><</div>
<div class="ContentPasted3 ContentPasted0" style="margin:0px"><html></div>
<div class="ContentPasted3 ContentPasted0" style="margin:0px"><head></head></div>
<div class="ContentPasted3 ContentPasted0" style="margin:0px"><body></div>
<div class="ContentPasted3 ContentPasted0" style="margin:0px">You are on a secure site.</div>
<div style="margin:0px" class="ContentPasted0"></body><br class="ContentPasted0">
</div>
<div class="ContentPasted3 ContentPasted0" style="margin:0px"></html></div>
<div style="margin:0px"><br class="ContentPasted3 ContentPasted0">
</div>
<div class="ContentPasted3 ContentPasted0" style="margin:0px">* Connection #0 to host www.my_site.fr left intact</div>
<div style="margin:0px"><br class="ContentPasted3 ContentPasted0">
</div>
-----------------------------------------------------</span></font></div>
<br>
</div>
<div id="appendonsend"></div>
<hr style="display:inline-block;width:98%" tabindex="-1">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" style="font-size:11pt" color="#000000"><b>De :</b> openssl-users <openssl-users-bounces@openssl.org> de la part de Michael Wojcik via openssl-users <openssl-users@openssl.org><br>
<b>Envoyé :</b> mercredi 26 avril 2023 20:03<br>
<b>À :</b> openssl-users@openssl.org <openssl-users@openssl.org><br>
<b>Objet :</b> RE: Is curl the good tool</font>
<div> </div>
</div>
<div class="BodyFragment"><font size="2"><span style="font-size:11pt;">
<div class="PlainText">> From: openssl-users <openssl-users-bounces@openssl.org> On Behalf Of<br>
> Viktor Dukhovni<br>
> Sent: Wednesday, 26 April, 2023 13:51<br>
> <br>
> On Wed, Apr 26, 2023 at 07:34:10PM +0000, Michael Wojcik via openssl-<br>
> users wrote:<br>
> <br>
> > > My question: if curl is working fine, can'I conclude my Apache<br>
> configuration and my certificates are fine ?<br>
> ><br>
> > If you didn't build curl yourself, there's no easy way to know what<br>
> > options were used when compiling it; but I believe by default it does<br>
> > not attempt to validate the peer's certificate chain. You have to use<br>
> > options such as --cacert or --capath to do basic validation, --crlfile<br>
> > to check against a CRL, --cert-status to check OCSP stapling if the<br>
> > peer provides it, and so on.<br>
> <br>
> This is not accurate. Curl will do WebPKI certificate verification by default, and<br>
> fail hard when the certificate does not match. To get unvalidated "https"<br>
> connections, the "-k" option is required to opt out of validation.<br>
<br>
Sorry, my mistake. I see now from the curl documentation that it has a collection of trust anchors it ships with.<br>
<br>
Since the OP is either using a private CA or self-signed entity certificates (it's not clear from the original message), curl's stock set of trust anchors obviously shouldn't work for verifying their server. But the OP didn't provide a curl command line so
it's not clear what tests were performed.<br>
<br>
-- <br>
Michael Wojcik<br>
</div>
</span></font></div>
</body>
</html>