Home/ Questions/Q 6569987
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-05-25T14:41:59+00:00

My code is trying to access an HTTPS server and it has its own

  • 0

My code is trying to access an HTTPS server and it has its own certificate. Example, the IP is “10.0.1.101”.

If I go through Safari and access “http://10.0.1.101”, everything’s OK. I do a simple curl_easy_perform() for this URL and data can be pulled from the HTTP URL. Cool.

I then try to access “https://10.0.1.101” (yes, HTTPS) and from Safari, I accept the certificate and give it a “trust” option and after that, Safari access to the HTTPS URL is OK.

So the certificate has been added to the Mac Keychain but when I try a curl_easy_perform() on the HTTPS URL, it still returns with a CURLE_SSL_CACERT. libcurl could not authenticate the HTTPS certificate with known CA certificates.

What is the missing link between libcurl’s certificate checking and Mac Keychain? Is there even a link at all? Is it possible to make libcurl look into the Mac Keychain for certificates? If so, how?

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    Nope. libcurl built to use OpenSSL will only read CA certs from a single PEM file or from a directory of CA certs that have been prepared OpenSSL-style.

    There’s no special magic for the Mac Keychain implemented.

    • 0