This is the mail archive of the cygwin mailing list for the Cygwin project.


Index Nav: [Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav: [Date Prev] [Date Next] [Thread Prev] [Thread Next]
Other format: [Raw text]

Re: need working cygwin tool for https download


Mike Marchywka wrote:

> curl --user-agent "Mozilla/4.0" --anyauth -d "logon=xxx"
> -d "password=xxxc" -c cookies -L "https://www.affymetrix.com/analysis/netaf
> fx/fullrecord.affx?pk=CANINE%3A1592474_AT"

And what is the exact error or failure?  curl works just fine with
https, you can verify that your installation works with a site that has
a known-good cert, such as:

$ curl -o /dev/null https://login.yahoo.com/

If you want to use https with a command line tool you need to determine
who signed the site's certificate and if that CA's cert is included in
the stock CA-bundle which for curl is
/usr/share/curl/curl-ca-bundle.crt.  If it's not in the bundle you need
to specify it with --cacert or --capath.  Read the man page and don't be
confused by --cert which is something very different and unrelated
unless you yourself have a peer cert and the website expects it (and if
you don't know, you don't.)

If you can't do any of this, or the site is using self-signed/snake oil,
then you can use -k which means don't verify the site's certificate. 
The connection is still encrypted and cannot be snooped by third
parties, but there's no assurance that the party you are talking to is
who them claim to be.

Brian

--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/


Index Nav: [Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav: [Date Prev] [Date Next] [Thread Prev] [Thread Next]