Hello, PycurlClient developers.

I am using the dbs3-client program. So, I used the PycurlClient library indirectly.

Our current issue is whether the dbs3-client can be used in a CentOS7 environment without setting an external environment variable such as cmsenv.

I've been working on this for the last few days, and I'm contacting you because there's a problem with the use of the curl when it's compiled with --with-nss.

Currently, for curl compiled with --with-nss, the processing of client certificates is not working properly.

For server certificates, inserting the ca_path as /etc/grid-security/certificates can solve the problem, but for client certificates( exactly, proxy user certificates which are produced by voms-proxy-init), we have to insert a personal certificate as an intermediate chain certificate to trust CA.

When I asked other developers who do similar work, most of them put ca_info (in the case of curl, --cacert option) together with the user certificate and root/grid certificates.

I tried to process it in the same way, but the ca_info was blocked in this python module.

Of course, using environmental variable settings such as cmsenv is an easy problem to solve, but some sites can not install CVMFS and grid middleware packages on their resources. In addition, it has the advantage of being able to use without CMSSW.

Please review it positively.

Regards,

-- Geonmo