Easy curl增加以下代碼
/*curl_easy_setopt(ptCurlItem->curl, CURLOPT_CAPATH, "/etc/pki/tls/private");*/
curl_easy_setopt(ptCurlItem->curl, CURLOPT_SSLCERT, "ca.crt");
curl_easy_setopt(ptCurlItem->curl, CURLOPT_SSLCERTPASSWD, "changeit");
curl_easy_setopt(ptCurlItem->curl, CURLOPT_SSLCERTTYPE, "PEM");
curl_easy_setopt(ptCurlItem->curl, CURLOPT_SSLKEY, "ca.key");
curl_easy_setopt(ptCurlItem->curl, CURLOPT_SSLKEYPASSWD, "changeit");
curl_easy_setopt(ptCurlItem->curl, CURLOPT_SSLKEYTYPE, "PEM");
注
1) 證書文件位置
ca.crt,ca.key存放在可執行文件相同目錄下,否則提示文件打開失敗
error 58, could not load PEM client certificate, OpenSSL error error:02001002:system library:fopen:No such file or directory, (no key found, wrong pass phrase, or wrong file format?)
2)需要使用自簽名證書文件ca.crt作為客戶端證書文件
3)需要同時提供ca.key文件,否則會提示
error 58, unable to set private key file: 'ca.crt' type PEM
附注:自簽名證書文件制作命令
openssl genrsa -out ca.key 1024 ##生成證書私鑰
openssl req -new -key ca.key -out ca.csr ##生成證書
openssl x509 -req -days 365 -in ca.csr -signkey ca.key -out ca.crt ##生成自簽名證書