Re^2: LWP Can't POST to HTTPS

[dorko]

OpenSSL> s_client -connect xxxx.ucf.edu:443
Loading 'screen' into random state - done
CONNECTED(000000C0)
write:errno=10053
---
no peer certificate available
---
No client certificate CA names sent
---
SSL handshake has read 0 bytes and written 321 bytes
---
New, (NONE), Cipher is (NONE)
Secure Renegotiation IS NOT supported
Compression: NONE
Expansion: NONE
---
error in s_client
OpenSSL> s_client -connect xxxx.ucf.edu:443
Loading 'screen' into random state - done
CONNECTED(00000080)
write:errno=10054
---
no peer certificate available
---
No client certificate CA names sent
---
SSL handshake has read 0 bytes and written 321 bytes
---
New, (NONE), Cipher is (NONE)
Secure Renegotiation IS NOT supported
Compression: NONE
Expansion: NONE
---
error in s_client

I'm guessing that means I have to provide certs? Looking at brian d foy's blog, something along the lines of
$ua->ssl_opts( SSL_ca_file => '/path/to/root.crt' );
or
 $ua->ssl_opts( SSL_ca_file => Mozilla::CA::SSL_ca_file() );
?

Cheers,

Brent

[dorko]

I've also tried:

$ua->ssl_opts( verify_hostname => 0 );

and it didn't work.

Cheers,

Brent

[Anonymous Monk]

But what is debug3 output?

[dorko]

Can you please tell me how to enable trace/debug? I found LWP::Debug, but that's depreciated.

Cheers,

Brent

[daxim]

You certificates seem to be gone. Are they?

You never said whether adding certificates explicitely worked for you. In any case you can extract the certificates and then blindly accept them.

echo -n|openssl s_client -connect webcourses.ucf.edu:443 -showcerts|perl -Mautodie -0 -ne'%c = m|^\s*\d+ s:.*?/CN=([^\n]+).*?(-----BEGIN CERTIFICATE-----.*?-----END CERTIFICATE-----)|gms; for (keys %c) { open $c, ">", "$_.crt.pem"; print {$c} $c{$_}; close $c }'

Translating this to Windows is left as an exercise for you.