I recently swapped my sites SSL certificate over to a new Thawte 2048 bit cert. Ubuntu/libcurl doesn’t seem to be able to verify it. Web browsers and OSX is fine. I had to manually update the cert bundle on the OS from here: https://search.thawte.com/support/ssl-digital-certificates/index?page=content&actp=CROSSLINK&id=AR1374 Any ideas why Ubuntu doesn’t have these? Thank you Mark Asked by markba Instead of explicitly trusting the intermediate certificates, you should have your web server send the full certificate chain [...]

I am using cURL to try to download all files in a certain directory. Here’s what my list of files looks like: I have tried to do in bash script: iiumlabs.[].csv.pgp and iiumlabs* and I guess cURL is not big on wildcards. curl -u login:pass ftp.myftpsite.com/iiumlabs* -O Question: How do I download this directory of files using cURL? Asked by Артём Царионов Curl does not support recursive download. Use wget –mirror –no-parent [URL] EDIT: For [...]

After extensive searching I haven’t found documentation of this problem yet. Suddenly, possibly following a software update(?), cURL fails to establish SSL connections with this error: curl: (35) error:0200100D:system library:fopen:Permission denied With strace, I found out that it’s trying to open an SSL certificate which is denied: open(“/etc/ssl/certs/3c58f906.0″, O_RDONLY|O_LARGEFILE) = -1 EACCES (Permission denied) This certificate is a symlink which points to AddTrust_External_Root.pem which in turn is a symlink to /usr/share/ca-certificates/mozilla/AddTrust_External_Root.crt. The permissions are such [...]

I am running into issues where the CA bundle that has been bundled with my version of cURL is outdated. curl: (60) SSL certificate problem, verify that the CA cert is OK. Details: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed More details here: http://curl.haxx.se/docs/sslcerts.html Reading through the documentation didn’t help me because I didn’t understand what I needed to do or how to do it. I am running RedHat and need to update the CA bundle. What do [...]

Why Debian Squeeze repositories points to cURL version 7.21.0 which is from June 2010 and not the version 7.26.0 which is from May of this year(cURL Changelog)?? I want to update to the version 7.26 to avoid NTLM bugs, can I do this or it will crash the system in any way? If yes, how do I do it?? Asked by PlxDontVoteMeDown Debian 6.0 (squeeze) was released in 2011, so it can not come with [...]

I create a bash script for a cronjob with Cpanel: ————–content of cron.sh——————— #!/bin/bash curl http://website.com/1.gif >> /home/myuser/public_html/directory/1.gif ———— end of content ————————- I expect the curl command to overwrite any existents files but what i get is that every time the cron is executed the destination file double its size! ex: after 1 cron: 1.gif size 50kb after 2 cron: 1.gif size 100kb and so on… I would like simply to overwrite the target [...]

I have an ubuntu server running apache on localhost / port 80. It’s domain is sub.domain.com If I make a curl request to http://localhost on that machine it will error with ‘couldnt connect to host’ immediately. If I make a curl request to sub.domain.com on that machine it will sit there in an infinite loop until it times out after a few minutes. If I open sub.domain.com in my web browser on another machine it [...]

I’m using Apache 2.2 running on Windows Server 2008 R2 as a WebDAV server for clients to upload large media files (roughly 100-2000MB). I am finding that when I have SSL enabled (openSSL 0.9.8o) and use HTTPS for the uploads the throughput is around 13Mbps but when I disable it and just use HTTP I get around 80Mbps. I can’t understand why this is happening as my understanding was that the heavy SSL work was [...]

I am trying to wget a link, this wget works fine on my local machine but it doesn’t do so on the server. i tried to check the response header and i got the following on my local laptop curl -I http://en.cihan.com.tr/rss?user=albawaba\&type=12 HTTP/1.0 200 OK Server: Apache-Coyote/1.1 X-Powered-By: Servlet 2.4; JBoss-4.2.2.GA (build: SVNTag=JBoss_4_2_2_GA date=200710221139)/Tomcat-5.5 Set-Cookie: JSESSIONID=E65E0CC7CF956F45962FD8571F3AB02A; Path=/ Content-Type: application/xml;charset=UTF-8 Content-Length: 80043 Date: Thu, 29 Mar 2012 12:19:26 GMT Set-Cookie: NSC_fo-sv-bs.djibo.dpn.us=ffffffff092a094245525d5f4f58455e445a4a4229a0;expires=Thu, 29-Mar-2012 12:20:51 GMT;path=/ X-Cache: MISS [...]

Note: See edit 3 for solution On a completely new install of Ubuntu I’m getting the following errors when using wget: wget https://test.sagepay.com–2012-03-27 12:55:12– https://test.sagepay.com/ Resolving test.sagepay.com… 195.170.169.8 Connecting to test.sagepay.com|195.170.169.8|:443… connected. ERROR: cannot verify test.sagepay.com’s certificate, issued by `/C=US/O=VeriSign, Inc./OU=VeriSign Trust Network/OU=Terms of use at https://www.verisign.com/rpa (c)06/CN=VeriSign Class 3 Extended Validation SSL SGC CA’: Unable to locally verify the issuer’s authority. To connect to test.sagepay.com insecurely, use `–no-check-certificate’. I’ve tried installing ca-certificates and configuring [...]