To share more knowledge 🙂 $webRequest = [Net.WebRequest]::Create(“https://www.outlook.com”) try { $webRequest.GetResponse() } catch {} $cert = $webRequest.ServicePoint.Certificate $bytes = $cert.Export([Security.Cryptography.X509Certificates.X509ContentType]::Cert) set-content -value $bytes -encoding byte -path “$pwd\Outlook.Com.cer” My co-worker Michael J. Lyons shared this with me.
Certificate validation did not fail, so the verify argument doesn’t apply here. What failed is the cipher negotiation; none of the ciphers requests is willing to use match those the server is willing to use. If you run your curl command with the -v switch you’ll see what cipher suite was negotiated by curl for … Read more
To check if your .key file has everything you need: #check if file contains a valid certificate: openssl x509 -text -in file.key It should print out certificate details. If it prints an error including the text “unable to load certificate”, then your file is not sufficient. #check if file contains a valid key: openssl rsa … Read more
I am a new iOS developer and I had the same issue before. I finally found that the problem was due to the p12 certificate. We should not use the private key p12 file, instead we should generate a p12 from your private key and the cert download from Apple. Please execute the following OpenSSL … Read more
In VB.Net, you need to write ServicePointManager.ServerCertificateValidationCallback = AddressOf AcceptAllCertifications
First, about the distinction between key and certificate (regarding “CA key”), there are 3 pieces used when talking about public-key certificates (typically X.509): the public key, the private key and the certificate. The public key and the private key form a pair. You can sign and decrypt with the private key, you can verify (a … Read more
There are a couple ways to do this. First, instead of going into openssl command prompt mode, just enter everything on one command line from the Windows prompt: E:\> openssl x509 -pubkey -noout -in cert.pem > pubkey.pem If for some reason, you have to use the openssl command prompt, just enter everything up to the … Read more
Thanks to Dave Chen’s suggestions, I realized I must have misplaced my certificate. The problem is solved by this certificate which is provided by the cURL creator (extracted from Mozilla): https://curl.haxx.se/ca/cacert.pem So after downloading this cacert.pem file into your project, in PHP you can now do this: curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, TRUE); curl_setopt($ch, CURLOPT_CAINFO, “/path/to/cacert.pem”); Alternatively, this … Read more