curl error when running nrdp

[bosecorp]

again, the --insecure is not available in AIX. what is the replacement of that in AIX for curl

[cmerchant]

We don't have an AIX box, and you didn't give us the full --help output that tgriep had requested. It would be helpful for us to determine if there is an alternative option within curl, that can accept an untrusted ssl connection with https.

The other option would be to modify the send_nrds.sh script and block out the curl and just use the wget option.

[bosecorp]

# curl -h
curl 7.9.3 (powerpc-ibm-aix4.3.3.0) libcurl 7.9.3
Usage: curl [options...] <url>
Options: (H) means HTTP/HTTPS only, (F) means FTP only
-a/--append Append to target file when uploading (F)
-A/--user-agent <string> User-Agent to send to server (H)
-b/--cookie <name=string/file> Cookie string or file to read cookies from (H)
-B/--use-ascii Use ASCII/text transfer
-c/--cookie-jar <file> Write all cookies to this file after operation (H)
-C/--continue-at <offset> Specify absolute resume offset
-d/--data <data> HTTP POST data (H)
--data-ascii <data> HTTP POST ASCII data (H)
--data-binary <data> HTTP POST binary data (H)
--disable-epsv Prevents curl from using EPSV (F)
-D/--dump-header <file> Write the headers to this file
--egd-file <file> EGD socket path for random data (SSL)
-e/--referer Referer page (H)
-E/--cert <cert[:passwd]> Specifies your certificate file and password (HTTPS)
--cert-type <type> Specifies your certificate file type (DER/PEM/ENG) (HTTPS)
--key <key> Specifies your private key file (HTTPS)
--key-type <type> Specifies your private key file type (DER/PEM/ENG) (HTTPS)
--pass <pass> Specifies your passphrase for the private key (HTTPS)
--engine <eng> Specifies the crypto engine to use (HTTPS)
--cacert <file> CA certifciate to verify peer against (SSL)
--ciphers <list> What SSL ciphers to use (SSL)
--connect-timeout <seconds> Maximum time allowed for connection
-f/--fail Fail silently (no output at all) on errors (H)
-F/--form <name=content> Specify HTTP POST data (H)
-g/--globoff Disable URL sequences and ranges using {} and []
-G/--get Send the -d data with a HTTP GET (H)
-h/--help This help text
-H/--header <line> Custom header to pass to server. (H)
-i/--include Include the HTTP-header in the output (H)
-I/--head Fetch document info only (HTTP HEAD/FTP SIZE)
--interface <interface> Specify the interface to be used
--krb4 <level> Enable krb4 with specified security level (F)
-K/--config Specify which config file to read
-l/--list-only List only names of an FTP directory (F)
-L/--location Follow Location: hints (H)
-m/--max-time <seconds> Maximum time allowed for the transfer
-M/--manual Display huge help text
-n/--netrc Read .netrc for user name and password
-N/--no-buffer Disables the buffering of the output stream
-o/--output <file> Write output to <file> instead of stdout
-O/--remote-name Write output to a file named as the remote file
-p/--proxytunnel Perform non-HTTP services through a HTTP proxy
-P/--ftpport <address> Use PORT with address instead of PASV when ftping (F)
-q When used as the first parameter disables .curlrc
-Q/--quote <cmd> Send QUOTE command to FTP before file transfer (F)
-r/--range <range> Retrieve a byte range from a HTTP/1.1 or FTP server
-R/--remote-time Set the remote file's time on the local output
-s/--silent Silent mode. Don't output anything
-S/--show-error Show error. With -s, make curl show errors when they occur
--stderr <file> Where to redirect stderr. - means stdout.
-t/--telnet-option <OPT=val> Set telnet option
-T/--upload-file <file> Transfer/upload <file> to remote site
--url <URL> Another way to specify URL to work with
-u/--user <user[:password]> Specify user and password to use
-U/--proxy-user <user[:password]> Specify Proxy authentication
-v/--verbose Makes the operation more talkative
-V/--version Outputs version number then quits
-w/--write-out [format] What to output after completion
-x/--proxy <host[:port]> Use proxy. (Default port is 1080)
--random-file <file> File to use for reading random data from (SSL)
-X/--request <command> Specific request command to use
-y/--speed-time Time needed to trig speed-limit abort. Defaults to 30
-Y/--speed-limit Stop transfer if below speed-limit for 'speed-time' secs
-z/--time-cond <time> Includes a time condition to the server (H)
-Z/--max-redirs <num> Set maximum number of redirections allowed (H)
-0/--http1.0 Force usage of HTTP 1.0 (H)
-1/--tlsv1 Force usage of TLSv1 (H)
-2/--sslv2 Force usage of SSLv2 (H)
-3/--sslv3 Force usage of SSLv3 (H)
-#/--progress-bar Display transfer progress as a progress bar
--crlf Convert LF to CRLF in upload. Useful for MVS (OS/390)

[jdalrymple]

Since the option isn't there you can go one of 2 routes:

1) source GNU curl and use that `-k` flag http://www-03.ibm.com/systems/power/sof ... alpha.html

2) download the public cert from the CA that signed your host cert and use the `--cacert` flag.

[bosecorp]

thanks. you can close this ticket