Ubuntu 10.04/CURL: How do I fix/update the CA Bundle?

Posted by Nick on Server Fault See other posts from Server Fault or by Nick
Published on 2010-06-14T18:30:55Z Indexed on 2010/06/14 18:33 UTC
Read the original article Hit count: 201

Filed under:
|
|

I recently upgraded our server from 8.04 to 10.04, and all the software along with it.

From what I've found online, it seems that the new version of CURL doesn't include a CA bundle, and, as a result, fails to verify that the certificate of the server you're connecting to is signed by a valid authority.

The actual error is:

CURL error: SSL certificate problem, verify that the CA cert is OK.
Details: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:
certificate verify failed 

Some palces I've found suggest manually specifying a CA file or disabling the check altogether by setting an option when you call CURL, but I'd much rather fix the issue globally, rather than having to modify each application's CURL calls.

Is there a way to fix CURL's CA problem server-wide so that all of the existing application code works as is without needing to be modified?

© Server Fault or respective owner

Related posts about ubuntu

Related posts about ubuntu-server