Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 20 Aug 2008 14:12:38 -0700
From:      Pete Stephenson <pete@heypete.com>
To:        roam@FreeBSD.org
Cc:        ports@FreeBSD.org
Subject:   FreeBSD Port: curl-7.18.0
Message-ID:  <48AC88C6.1020802@heypete.com>

next in thread | raw e-mail | index | archive | help
This is a cryptographically signed message in MIME format.

--------------ms090407000308030405020604
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit

curl maintainer,

I was in contact with my web host to inquire if their installation of
curl from the FreeBSD Ports could include the Mozilla CA bundle. I am
attempting to use curl to connect to a site using the StartCom SSL CA
(http://www.startssl.com/), which is included with the Mozilla bundle,
but evidently not with the default CA bundle included with curl. As
such, my use of curl meets with errors relating to the fact that it
doesn't recognize the CA.

I asked that they include the bundle in their installation, but they
said, "That would require us to manually update the installed list on
each and every one of our machines after each and every curl update.
Curl updates very frequently and we have a lot of machines, so that is
simply not feasible."

They suggested that I contact the port maintainer and ask if you could
alter the port of curl to use the Mozilla CA bundle automatically.
Evidently this is quite common with Linux distributions. If this were
the case, all of the host's systems would pick up the change automatically.

Additionally, my host suggested, "It may be worth mentioning to
him/her/it that the Mozilla CA list is already available on FreeBSD in
PEM format as security/ca_root_nss, so it may be as simple as adding a
port dependency and changing src/lib/ca-bundle.h."

Is it possible to include the Mozilla CA bundle with curl?

Cheers!
-Pete

-- 
Pete Stephenson
HeyPete.com

--------------ms090407000308030405020604
Content-Type: application/x-pkcs7-signature; name="smime.p7s"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="smime.p7s"
Content-Description: S/MIME Cryptographic Signature
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--------------ms090407000308030405020604--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?48AC88C6.1020802>