curl error setting certificate verify locations
 

I get this error when running this command from the command line:

curl https://www.domain.com

curl: (60) error setting cerficate verify locations

I assume that this should be *certificate* instead of *cerficate* which leads me to believe that it's a problem on my setup (SuSE 8.2).

I have been trying to find the config file for curl to see if it is a problem with the path to something.

Any ideas?

Could it be due to the fact that I have no CAcert.pem or CAkey.pem?

If so can I just set up my own certificate and where is the best place to get one from?

After running a few more test it seems that it may be a problem with SSL after all. If I run curl -k https://www.paypal.com it works and I can establish a secure connection (just ignoring to to check the incoming cert).

This also works with my script when I add:

curl_setopt($curlSession, CURLOPT_SSL_VERIFYPEER, FALSE);

The session is still secure but I would be open to a "man-in-the-middle" attack.

Does anyone know where the perl script is that is run to check the incoming cert because I think it's this that is causing the problem.

Is there a simple search I can do that can check within a file for the string "error setting cerficate verify locations"

Thanks

grep 'error setting cerficate verify locations' <filename>
will search

I solved the problem (on Ubuntu 7.10 gutsy) by doing this:

sudo aptitude install ca-certificates

I imagine something similar will work for other platforms -- you may be missing the ca-certificates package