I just rolled back to the 12/07 FS version and confirmed that mod_shout with SSL is working for me in that version...no complaints about the cert file

I'm speculating that the curl call in the 12/07 version is somehow referencing the CA file at /etc/ssl/certs/ca-certificates.crt , but is no longer referencing that file in the latest, and is trying to reference: /usr/local/freeswitch/share/curl/curl-ca-bundle.crt instead, which doesn't exist. 

I guess I could put a sym link in there during my deployment process, but my question is: is this the appropriate way to handle the situation? Or should I be doing something different during the make and install? Or is there something I need to add to the FS configuration?

Thanks in advance!!
Matt

On Sat, Mar 3, 2012 at 11:53 AM, Matt Stockton <mstockton@harqen.com> wrote:

Hi all,

I just upgraded to the latest git, and I'm trying to dive into an issue I'm having. I am using mod_shout and in some instances am playing files that are hosted on web servers protected by https. This seemed to be working fine before I upgraded, but now I am getting the following issues, which is preventing the streaming of the files:

12-03-02 19:06:57.926919 [WARNING] mod_shout.c:468 CURL returned error:[77] problem with the SSL CA cert (path? access rights?) : error setting certificate verify locations:
  CAfile: /usr/local/freeswitch/share/curl/curl-ca-bundle.crt
  CApath: none

I looked at the code and the git history in mod_shout.c where it is setting all the curl options, nothing seems to have changed there since I last updated FS (12/07), however, the curl-ca-bundle file is certainly not located at /usr/local/freeswitch/share/curl/curl-ca-bundle.crt and never has been as far as I know.

I also looked at other mods that are using curl and where they are calling switch_curl_easy_setopt (mod_xml_curl, mod_httapi), and noticed that those mods are setting options that might be related to what I need? CURLOPT_SSLCERT

I am confused as to what is causing the breakage, since mod_shout hasn't changed since I last updated, yet none of the ssl curl options are set in mod_shout..and I never had any problems with the mod_shout curl usage finding the certificate verify locations by default. Is there some other default that used to be set in the freeswitch configuration that I need to set manually?

Any help is appreciated!!! Thanks!
Matt

---

_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org
http://www.freeswitchsolutions.com

FreeSWITCH-powered IP PBX: The CudaTel Communication Server
http://www.cudatel.com

Official FreeSWITCH Sites
http://www.freeswitch.org
http://wiki.freeswitch.org
http://www.cluecon.com

FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org