libcurl证书验证失败

Question

I am using libcurl from C++ code but it it failing during certificate verification. Here is the error output:

errorbuffer: error setting certificate verify locations: CAfile: /usr/share/ssl/certs/ca-bundle.crt CApath: none

I don't understand why does it look for certificate in that location, I haven't specified any particular location. Running it in unsecure mode by using below code runs normally:

curl_easy_setopt(curl, CURLOPT_SSL_VERIFYPEER, 0L);

But I want to run it in secure mode.

Any ideas why is it looking for certificates in that wrong location?

Thanks.

Answer 1

libcurl has a built-in default location where it looks for the CA cert bundle. That default path is set when libcurl is built. In many cases that would be done by the Linux distro maker(s).

If you want to provide a different CA cert bundle that the default, libcurl offers options to do so:

• CURLOPT_CAINFO sets the file name to load CA certs from
• CURLOPT_CAPATH sets the directory (for primarily OpenSSL-using libcurl versions) in which single CA certs are stored