Comment 14 for bug 246205

Revision history for this message
Daniel Hahler (blueyed) wrote : Re: "Entrust.net Secure Server CA" certificate missing for WCG

Sorry for misinformation above:
/usr/share/ca-certificates/mozilla/Entrust.net_Secure_Server_CA.crt is present in Ubuntu (Hardy and Intrepid)

I've tried debugging this by removing certificates from /etc/ssl/certs/ca-certificates.crt and it worked. So somehow I've thought it may be related to the size of the combined cert bundle, but OTOH I could make it work yesterday by adding another one to the chain.

So, I would say it's some odd behavior in libcurl..?! At least that's where the CURLE_SSL_CACERT ("Peer certificate cannot be authenticated with known CA certificates") error comes from.

For reference, Intrepid has libcurl3 version 7.18.2-1ubuntu3 and it fails with BOINC 6.2.14, which I've just built in pbuilder, too.