{"id":382,"date":"2014-12-24T23:44:54","date_gmt":"2014-12-24T15:44:54","guid":{"rendered":"http:\/\/www.ipcpu.com\/?p=382"},"modified":"2014-12-24T23:44:54","modified_gmt":"2014-12-24T15:44:54","slug":"curl-https-error","status":"publish","type":"post","link":"https:\/\/c.ipcpu.com\/2014\/12\/curl-https-error\/","title":{"rendered":"Linux\u4f7f\u7528curl\u8bbf\u95eehttps\u7ad9\u70b9\u65f6\u62a5\u9519\u6c47\u603b"},"content":{"rendered":"
\u6bcf\u4e00\u79cd\u5ba2\u6237\u7aef\u5728\u5904\u7406https\u7684\u8fde\u63a5\u65f6\u90fd\u4f1a\u4f7f\u7528\u4e0d\u540c\u7684\u8bc1\u4e66\u5e93\u3002<\/p>\n
IE\u6d4f\u89c8\u5668\u548cFireFox\u6d4f\u89c8\u5668\u90fd\u53ef\u4ee5\u5728\u672c\u6d4f\u89c8\u5668\u7684\u63a7\u5236\u9762\u677f\u4e2d\u627e\u5230\u8bc1\u4e66\u7ba1\u7406\u5668\u3002<\/p>\n
\u5728\u8bc1\u4e66\u7ba1\u7406\u5668\u4e2d\u53ef\u4ee5\u81ea\u7531\u6dfb\u52a0\u3001\u5220\u9664\u6839\u8bc1\u4e66\u3002<\/p>\n
\u800clinux\u7684curl\u4f7f\u7528\u7684\u8bc1\u4e66\u5e93\u5728\u6587\u4ef6\u201c\/etc\/pki\/tls\/certs\/ca-bundle.crt\u201d\u4e2d\u3002\uff08CentOS\uff09<\/p>\n
\u4ee5\u4e0b\u662fcurl\u5728\u8bbf\u95eehttps\u7ad9\u70b9\u65f6\u5e38\u89c1\u7684\u62a5\u9519\u4fe1\u606f<\/p>\n
[<\/span>root@ip<\/span>-<\/span>172<\/span>-<\/span>31<\/span>-<\/span>32<\/span>-<\/span>208<\/span> nginx<\/span>]#<\/span> curl https<\/span>:<\/span>\/\/m.ipcpu.com<\/span><\/code><\/li>
curl<\/span>:<\/span> <\/span>(<\/span>60<\/span>)<\/span> <\/span>Peer<\/span>'s Certificate issuer is not recognized.<\/span><\/code><\/li>
More details here: http:\/\/curl.haxx.se\/docs\/sslcerts.html<\/span><\/code><\/li><\/ol><\/pre>\n
\u6b64\u79cd\u60c5\u51b5\u591a\u53d1\u751f\u5728\u81ea\u7b7e\u540d\u7684\u8bc1\u4e66\uff0c\u62a5\u9519\u542b\u4e49\u662f\u7b7e\u53d1\u8bc1\u4e66\u673a\u6784\u672a\u7ecf\u8ba4\u8bc1\uff0c\u65e0\u6cd5\u8bc6\u522b\u3002<\/p>\n
\u89e3\u51b3\u529e\u6cd5\u662f\u5c06\u7b7e\u53d1\u8be5\u8bc1\u4e66\u7684\u79c1\u6709CA\u516c\u94a5cacert.pem\u6587\u4ef6\u5185\u5bb9\uff0c\u8ffd\u52a0\u5230\/etc\/pki\/tls\/certs\/ca-bundle.crt\u3002<\/p>\n
\u6211\u4eec\u5728\u8bbf\u95ee12306.cn\u8ba2\u7968\u7f51\u7ad9\u65f6\u4e5f\u62a5\u4e86\u7c7b\u4f3c\u7684\u9519\u8bef\u3002<\/p>\n
[<\/span>root@ip<\/span>-<\/span>172<\/span>-<\/span>31<\/span>-<\/span>32<\/span>-<\/span>208<\/span> <\/span>~]#<\/span> curl https<\/span>:<\/span>\/\/kyfw.12306.cn\/<\/span><\/code><\/li>
curl<\/span>:<\/span> <\/span>(<\/span>60<\/span>)<\/span> <\/span>Peer<\/span>'s certificate issuer has been marked as not trusted by the user.<\/span><\/code><\/li>
More details here: http:\/\/curl.haxx.se\/docs\/sslcerts.html<\/span><\/code><\/li><\/ol><\/pre>\n
2.SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed<\/h4>\n
[<\/span>root@GO<\/span>-<\/span>EMAIL<\/span>-<\/span>1<\/span> aa<\/span>]#<\/span> curl https<\/span>:<\/span>\/\/github.com\/<\/span><\/code><\/li>
curl<\/span>:<\/span> <\/span>(<\/span>60<\/span>)<\/span> SSL certificate problem<\/span>,<\/span> verify that the CA cert <\/span>is<\/span> OK<\/span>.<\/span> <\/span>Details<\/span>:<\/span><\/code><\/li>
error<\/span>:<\/span>14090086<\/span>:<\/span>SSL routines<\/span>:<\/span>SSL3_GET_SERVER_CERTIFICATE<\/span>:<\/span>certificate verify failed<\/span><\/code><\/li>
More<\/span> details here<\/span>:<\/span> http<\/span>:<\/span>\/\/curl.haxx.se\/docs\/sslcerts.html<\/span><\/code><\/li><\/ol><\/pre>\n
\u6b64\u95ee\u9898\u591a\u662f\u7531\u4e8e\u672c\u5730CA\u8bc1\u4e66\u5e93\u8fc7\u65e7\uff0c\u5bfc\u81f4\u65b0\u7b7e\u53d1\u8bc1\u4e66\u65e0\u6cd5\u8bc6\u522b\u3002<\/p>\n
\u7ecf\u6392\u67e5\uff0cgithub.com\u8bc1\u4e66\u662f\u7531GTE CyberTrust Root\u7b7e\u53d1,\u73b0\u884c\u8bc1\u4e66\u65f6\u95f4\u662f\uff1a
\u4e0d\u65e9\u4e8e(1998\/8\/13 0:29:00 GMT)
\u4e0d\u665a\u4e8e(2018\/8\/13 23:59:00 GMT)<\/p>\n\u800c\u5728\u6211\u4eec\u7684Redhat5.3\u7cfb\u7edf\u4e2dca-bundle.crt\u6587\u4ef6\u53d1\u73b0\uff0cGTE CyberTrust Root\u7684\u65f6\u95f4\u5df2\u7ecf\u8fc7\u671f\u3002<\/p>\n
<\/span>Issuer<\/span>:<\/span> C<\/span>=<\/span>US<\/span>,<\/span> O<\/span>=<\/span>GTE <\/span>Corporation<\/span>,<\/span> CN<\/span>=<\/span>GTE <\/span>CyberTrust<\/span> <\/span>Root<\/span><\/code><\/li>
<\/span>Validity<\/span><\/code><\/li>
<\/span>Not<\/span> <\/span>Before<\/span>:<\/span> <\/span>Feb<\/span> <\/span>23<\/span> <\/span>23<\/span>:<\/span>01<\/span>:<\/span>00<\/span> <\/span>1996<\/span> GMT<\/span><\/code><\/li>
<\/span>Not<\/span> <\/span>After<\/span> <\/span>:<\/span> <\/span>Feb<\/span> <\/span>23<\/span> <\/span>23<\/span>:<\/span>59<\/span>:<\/span>00<\/span> <\/span>2006<\/span> GMT<\/span><\/code><\/li><\/ol><\/pre>\n
\u89e3\u51b3\u529e\u6cd5\u662f\u66f4\u65b0\u672c\u5730CA\u8bc1\u4e66\u5e93\u3002<\/p>\n