如何将.CER 与 curl_easy_setopt 一起使用

Question

I would like to use.cer file with curl api in C++. I was exploring some options as described in https://curl.se/libcurl/c/curl_easy_setopt.html . here is the code snippet which i tried

 curl_easy_setopt(curl1, CURLOPT_CUSTOMREQUEST, "GET");
  curl_easy_setopt(curl1, CURLOPT_URL, "https://test.com/?AppID=DB");
  curl_easy_setopt(curl1, CURLOPT_FOLLOWLOCATION, 1L);
  curl_easy_setopt(curl1, CURLOPT_DEFAULT_PROTOCOL, "https");
  struct curl_slist *headers = NULL;
  curl_easy_setopt(curl1, CURLOPT_HTTPHEADER, headers);

  curl_easy_setopt(curl1, CURLOPT_SSLCERTTYPE, "CER");
  curl_easy_setopt(curl1, CURLOPT_SSLCERT, "/cacert.cer");
  res = curl_easy_perform(curl1);

but here I get error saying Failed: SSL peer certificate or SSH remote key was not ok

Thanks you in advance for helping.

Answer 1

CURLOPT_SSLCERT sets the client certificate, it's supposed to be used in combination with CURLOPT_SSLKEY .

To set the server (CA) certificate, useCURLOPT_ISSUERCERT for a single cert or CURLOPT_CAINFO for a CA bundle.

Though it accepts only PEM format.

You can convert DER to PEM using eg OpenSSL.

openssl x509 -inform der -in cacert.cer -out cacert.pem