ssl

Getting error in Curl – Peer certificate cannot be authenticated with known CA certificates

I am getting the below error while making ssl connection with self signed certificate. “Peer certificate cannot be authenticated with known CA certificates” It is working fine with CA signed certificate. I am setting the below using curl_easy_setopt(). curl_easy_setopt(MyContext, CURLOPT_CAPATH, CA_CERTIFICATE_PATH) curl_easy_setopt(MyContext, CURLOPT_SSL_VERIFYPEER,TRUE); The curl versionlibcurl-7.19.7-26 Openssl version is 0_9_8u. Please let me know how … Read more

How to disable cURL SSL certificate verification

Simply add the -k switch somewhere before the url. Disclaimer: Use this at your own risk. -k, –insecure (TLS) By default, every SSL connection curl makes is verified to be secure. This option allows curl to proceed and operate even for server connections otherwise considered insecure. The server connection is verified by making sure the server’s certificate … Read more

Error `sec_error_revoked_certificate` when viewed in Firefox only

When Firefox web browser checks a security certificate, it also checks with the issuing authority if the certificate is valid. It appears that, near a certificate’s expiration date, the issuing authority may release a new certificate. The two certificates have conflicting expiration dates. For reasons unknown, this caused Firefox to report a sec_error_revoked_certificate error and … Read more

Error:error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert handshake failure

this code working on localhost but when i am testing on my live server it will give me this error Error:error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert handshake failure then i tried this github.com/paypal/TLS-update/tree/master/php this will again work on localhost and on live it gives me this my server have these certificates Server Key and Certificate #1 #2 #3 … Read more

wget returns “Unable to establish SSL connection”

This is most likely due to a TLS version mismatch from client to server-side. Have a look here: Unable to establish SSL connection upon wget on Ubuntu 14.04 LTS EDIT: Upon further digging into the problem, it could also be because of a wrong system time or an old version of wget.

urllib and “SSL: CERTIFICATE_VERIFY_FAILED” Error

If you just want to bypass verification, you can create a new SSLContext. By default newly created contexts use CERT_NONE. Be careful with this as stated in section 17.3.7.2.1 When calling the SSLContext constructor directly, CERT_NONE is the default. Since it does not authenticate the other peer, it can be insecure, especially in client mode where most of time you … Read more

+ More