{"id":172,"date":"2021-03-26T12:35:47","date_gmt":"2021-03-26T12:35:47","guid":{"rendered":"https:\/\/habett.fr\/blog\/?p=172"},"modified":"2021-03-27T07:17:36","modified_gmt":"2021-03-27T07:17:36","slug":"curl-cert-apache2-2-2","status":"publish","type":"post","link":"https:\/\/habett.fr\/blog\/2021\/03\/curl-cert-apache2-2-2\/","title":{"rendered":"curl cert apache2 2.2"},"content":{"rendered":"\n<p>Grand fan de l&rsquo;initiative letsencrypt (<a href=\"https:\/\/letsencrypt.org\/\">https:\/\/letsencrypt.org\/<\/a>) dont parle souvent l&rsquo;EFF (<a href=\"https:\/\/www.eff.org\/\">https:\/\/www.eff.org\/<\/a>) (je suis membre), j&rsquo;ai eu des probl\u00e8mes avec la v\u00e9rification des certificats g\u00e9n\u00e9r\u00e9s par ce service sur un serveur avec une installation un peu ancienne. curl et LWP me refusaient en raison de probl\u00e8mes de certificats.<br><a href=\"https:\/\/community.letsencrypt.org\/t\/certificate-verification-errors-when-using-curl\/105335\">https:\/\/community.letsencrypt.org\/t\/certificate-verification-errors-when-using-curl\/105335<\/a> a attir\u00e9 mon attention sur le fait qu&rsquo;il me manquait la ligne, \u00e0 priori propre \u00e0 apache 2,2 suivante, \u00e0 adapter au bon domaine, dans ma config apache:<br>SSLCertificateChainFile \/etc\/letsencrypt\/live\/privatestash.org\/chain.pem<\/p>\n\n\n\n<p><br>Une fois en place, plus besoin de bypass de la v\u00e9rification des certificats dans LWP (use IO::Socket::SSL; $ua->ssl_opts( SSL_verify_mode => IO::Socket::SSL::SSL_VERIFY_NONE, verify_hostname =>0);) et plus besoin des m\u00eames options dans curl (-k), ce qui est bien plus satisfaisant.<\/p>\n\n\n\n<p>Le truc bizarre est que les browsers ne p\u00e2tissaient pas de ce point.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Grand fan de l&rsquo;initiative letsencrypt (https:\/\/letsencrypt.org\/) dont parle souvent l&rsquo;EFF (https:\/\/www.eff.org\/) (je suis membre), j&rsquo;ai eu des probl\u00e8mes avec la v\u00e9rification des certificats g\u00e9n\u00e9r\u00e9s par ce service sur un serveur avec une installation un peu ancienne. curl et LWP me refusaient en raison de probl\u00e8mes de certificats.https:\/\/community.letsencrypt.org\/t\/certificate-verification-errors-when-using-curl\/105335 a attir\u00e9 mon attention sur le fait qu&rsquo;il &hellip; <a href=\"https:\/\/habett.fr\/blog\/2021\/03\/curl-cert-apache2-2-2\/\" class=\"more-link\">Continuer la lecture de <span class=\"screen-reader-text\">curl cert apache2 2.2<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-172","post","type-post","status-publish","format-standard","hentry","category-non-classe"],"_links":{"self":[{"href":"https:\/\/habett.fr\/blog\/wp-json\/wp\/v2\/posts\/172","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/habett.fr\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/habett.fr\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/habett.fr\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/habett.fr\/blog\/wp-json\/wp\/v2\/comments?post=172"}],"version-history":[{"count":4,"href":"https:\/\/habett.fr\/blog\/wp-json\/wp\/v2\/posts\/172\/revisions"}],"predecessor-version":[{"id":180,"href":"https:\/\/habett.fr\/blog\/wp-json\/wp\/v2\/posts\/172\/revisions\/180"}],"wp:attachment":[{"href":"https:\/\/habett.fr\/blog\/wp-json\/wp\/v2\/media?parent=172"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/habett.fr\/blog\/wp-json\/wp\/v2\/categories?post=172"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/habett.fr\/blog\/wp-json\/wp\/v2\/tags?post=172"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}