0

我有一个带有此证书的自签名证书和基于 apache 2.x 的网站。只想通过 SSL 从我的软件访问此站点。

执行以下操作：

int _tmain(int argc, _TCHAR* argv[])
{

CURL *curl;
  CURLcode res;

  curl_global_init(CURL_GLOBAL_DEFAULT);

  curl = curl_easy_init();
  if(curl) {
    curl_easy_setopt(curl, CURLOPT_URL, "https://mysite.com");
    curl_easy_setopt(curl, CURLOPT_CAINFO, "n.crt");
 curl_easy_setopt(curl, CURLOPT_SSL_VERIFYPEER, 1L);
 curl_easy_setopt(curl, CURLOPT_SSL_VERIFYHOST, 0L);
curl_easy_setopt(curl, CURLOPT_CAPATH, "D:\\");
 curl_easy_setopt(curl, CURLOPT_VERBOSE, 1L) ;
 curl_easy_setopt(curl, CURLOPT_SSLVERSION, CURL_SSLVERSION_DEFAULT); 

    /* Perform the request, res will get the return code */ 
    res = curl_easy_perform(curl);
    /* Check for errors */ 
    if(res != CURLE_OK)
      fprintf(stderr, "curl_easy_perform() failed: %s\n",
              curl_easy_strerror(res));

    /* always cleanup */ 
    curl_easy_cleanup(curl);
  }

  curl_global_cleanup();

    return 0;
}

但每次我得到：

* About to connect() to mysite.com port 443 (#0)
*   Trying 1.1.1.1... * connected
* Connected to mysite.com (1.1.1.1) port 443 (#0)
* error setting certificate verify locations:
  CAfile: n.crt
  CApath: D:\

* Closing connection #0
* Problem with the SSL CA cert (path? access rights?)
curl_easy_perform() failed: Problem with the SSL CA cert (path? access rights?)
Press any key to continue . . .

你能否请教，我做错了什么？

PS：

  • Win7 x64
  • MSVC++ 2010
  • curl 7.19.3 (i386-pc-win32) libcurl/7.19.3 OpenSSL/0.9.8j 协议：tftp ftp telnet dict ldap http 文件 https ftps
4

1 回答 1

0

找到 n.crt 的位置。当可执行文件运行时，所有文件检查都与其路径相关。因此，要么将 n.crt 放在可执行文件的文件夹中，要么在设置 CURLOPT_CAINFO 时放置文件的绝对路径。否则使用证书信息文件的相对路径。

于 2013-05-24T10:12:54.167 回答