Using an SSL cert to talk to a server

[rastoboy]

Greetings Brothers,
Sorry for the vagueness of my question, but I think my biggest problem is I don't know the proper terminology.

I need to use a given SSL certificate (pem format) to talk to my company's API server. I can use LWP::UserAgent to get a nice response from it telling me that I'm not using the cert.

I've been reading through the docs for that module, and I see stuff about specifying a CA file (which I tried) but I don't think that's quite the right thing. I don't think this is something specific to our API--it's just an HTTPD server listening on 443, and I need to somehow tell perl to use this cert when trying to make the SSL connection.

Does that make any sense? Any input would be greatly appreciated!

[Anonymous Monk]

See Mozilla::CA and IO::Socket::SSL

[rastoboy]

Thanks for the response but wow, that is really hard. With curl you can just use -E to specify a cert. Is it really this hard in perl?

[Anonymous Monk]

Thanks for the response but wow, that is really hard.

See http://cpansearch.perl.org/src/SULLR/IO-Socket-SSL-1.44/example/lwp-with-verifycn.pl and add SSL_key_file / SSL_cert_file .... something :)

Or, see also, http://cpansearch.perl.org/src/NANIS/Crypt-SSLeay-0.58/eg/lwp-ssl-test

Also, I'm sure any suggestions for making it easier would be appreciated https://rt.cpan.org/Public/Dist/Display.html?Name=libwww-perl

With curl you can just use -E to specify a cert. Is it really this hard in perl?

You can use curl from perl :)