Bug 6708 - curl SSLv3 certificate validation failure
Summary: curl SSLv3 certificate validation failure
Status: RESOLVED FIXED
Alias: None
Product: OE-Core
Classification: Build System, Metadata & Runtime
Component: connectivity (show other bugs)
Version: 1.6
Hardware: x86 x86
: Medium+ normal
Target Milestone: 1.6.3
Assignee: Cristian Iorga
QA Contact:
URL:
Whiteboard:
Depends on:
Blocks:
 
Reported: 2014-09-11 13:34 UTC by Paul Eggleton
Modified: 2015-02-11 15:49 UTC (History)
3 users (show)

See Also:
OS type for building Yocto: ---
Type of Regression: ---
Verified:
Documentation change: No (bug/feature does not impact docs)

Attachments
Log of curl failure (1.52 KB, text/plain)
2014-09-11 13:34 UTC, Paul Eggleton 		no flags Details
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Paul Eggleton 2014-09-11 13:34:33 UTC 
Created attachment 2122 [details]
Log of curl failure

With the latest IoT devkit images on Galileo it seems like there is a bug with respect to validating SSL certificates that causes the connection to fail unless SSLv3 is forced (see attached log, ignoring the certificates issue which seems to be a separate bug as that still happens with ca-certificates installed).

I have been able to determine the following:
1) It isn't fixed by upgrading curl using the 7.37 recipe we have in master
2) It does seem to be fixed by either upgrading gnutls to the 3.x version in master, or building curl against OpenSSL instead.
Comment 1 Paul Eggleton 2015-02-11 15:49:22 UTC 
According to Brendan this issue is fixed in the latest daisy branch, so I'm marking this one as resolved.