views:

174

answers:

0

I am trying to use libcurl to talk to a test server (FileZilla) using FTPS. Everything works if I disable the certificate validation, but I would like to understand what the problem is with the certificate validation.

I used FileZilla to generate its own certificate, which I assume is self-signed and is not related to any certificate authority.

When I connect using libcurl, I get the error

curl: (60) SSL certificate problem, verify that the CA cert is OK. Details:
error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed

I have tried using a CA bundle extracted from Firefox (as directed by the curl docs), but that doesn't seem to help.

Do I need to deal with a certificate authority if I am using a self-generated certificate in FileZilla? Is there something about libcurl that I am missing in order to do this?

Thanks.