Forum How do I...?

SSL, curl works but prince doesn't

christian-oudard
I have an html file I'm converting with media links that use https. I get the following error:

$ prince --ssl-ca-cert=cert.crt --baseurl=https(domain) doc.html
prince: https(domain)/css/main.css: warning: SSL certificate problem, verify that the CA cert is OK. Details: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed


but when i do the same thing with curl, it works:

curl --cacert cert.crt https(domain)/css/main.css


Any idea what's going on here?

(sorry about the (domain) stuff, i can't post urls)
mikeday
Which Linux distribution are you running Prince on?
christian-oudard
Ubuntu 8.10. The server serving the media by https is Ubuntu 8.04, running whatever version of Apache is standard for that version of Ubuntu.
mikeday
I wonder if you could try running it on 8.04 and see if it works there? The Linux build of Prince was compiled on 8.04, and perhaps there have been some library changes since then. What version of curl is installed on your 8.10 system?
christian-oudard
It appears to be a problem with the particular version of libcurl. The curl command which works on 8.10, with curl 7.18.2 does NOT work on 8.04, with curl 7.18.0.

Curl version information:

from ubuntu 8.10:
$ curl --version
curl 7.18.2 (i486-pc-linux-gnu) libcurl/7.18.2 OpenSSL/0.9.8g zlib/1.2.3.3 libidn/1.8
Protocols: tftp ftp telnet dict ldap ldaps http file https ftps 
Features: GSS-Negotiate IDN IPv6 Largefile NTLM SSL libz 

from ubuntu 8.04:
$ curl --version
curl 7.18.0 (i486-pc-linux-gnu) libcurl/7.18.0 OpenSSL/0.9.8g zlib/1.2.3.3 libidn/1.1
Protocols: tftp ftp telnet dict ldap ldaps http file https ftps 
Features: GSS-Negotiate IDN IPv6 Largefile NTLM SSL libz 
mikeday
Okay, I think Prince is statically linked to libcurl 7.16.4, so that could explain the issue. We should be able to upgrade to a more recent library version for the next release.
mikeday
The beta version of Prince 7.0, out now, uses curl 7.19.5.