Problem with certificates on windows only? about curlcabundle HOT 8 OPEN

Interesting, I'll try to upgrade the script, haven't done that in a while, maybe it will fix the problem.
Otherwise I think I'll have to setup testing, if the certificates work on buch of domains.

from curlcabundle.

I've already have to revert one cert for our usage https://github.com/Kdyby/CurlCaBundle/tree/with-old-cybertrust-root.
Maybe it's related to mozilla droping the "weak" certs? http://curl.haxx.se/docs/caextract.html

from curlcabundle.

https://www.ssllabs.com/ssltest/analyze.html?d=heureka.cz&latest "Certificate uses a weak signature. When renewing, ensure you upgrade to SHA2."

from curlcabundle.

It's hard to say as I don't know how it is processed internally in curl. Is it possible that on linux it's enought that top level authority is trusted and on windows it requires all levels to be trusted?

When I compare ca-bundle.crt on my dev machine with that from production server, there is no change in "thawte" brand (and even if I replace my ca-bundle.crt with that from production it do not help)...

from curlcabundle.

I'm guessing the problem started with this commit, right? 50b9eef

from curlcabundle.

Yes, when I try ca-bundle.crt before that commit, it works. After that it ends with SSL error...

from curlcabundle.

You can just lock on the previous tag v1.0.5 and it should work till we figure something out...
I'm guessing I could create another branch that would contain the weaker certs.

from curlcabundle.

Ok, thanks

from curlcabundle.