php - cURL error 60 : SSL certificate : unable to get local issuer certificate - Stack Overflow
▻https://stackoverflow.com/questions/29822686/curl-error-60-ssl-certificate-unable-to-get-local-issuer-certificate#
Howto pour contourner l’erreur cURL error 60: SSL certificate problem: unable to get local issuer certificate sur un serveur local sous Windows (Laragon par ex)
Le repo pour récupérer cacert.pem à jour : ▻https://curl.se/docs/caextract.html
#Daniel_Stenberg — Emails
▻https://daniel.haxx.se/email
This is a collection of somewhat special emails I have received over the years. Shown here for social science research purposes.
I have tried to clean off all names, email addresses and some company names from the emails. Except the redaction of personal identifiable information, the contents of the emails are shown exactly as I received them.
The emails tend to be in one of these categories.
– Accusing me of wrongdoings
– Thinking I’m responsible for or know anything about a product (that probably uses #curl)
– Random weirdness
To the best of my knowledge, none of these emails were sent ironically or as jokes.
This is a subset of the total feed. A curated “best of”.
▻https://daniel.haxx.se/email/2009-03-21.html
Subject: Installer
What URL do I put in to get free apps ?plese tell me
Sent from my iPhone
▻https://daniel.haxx.se/email/2010-12-23.html
Date: Thu, 23 Dec 2010 22:56:00
From: iHack3r <hidden>
Subject: Hacking me
To the idiot named Daniel, Please stop brute force attacking my FTP client.
I do not appreciate it, i have an anonymous account set up for the general
public to access my files that i want them to access, QUIT trying to hack
the admin because 1. DISABLED unless i am leaving to go somewhere without
my computer 2: THE PASSWORD is random letters and numbers.
–iHack3r
I’m concerned about LLM code in curl and would like to suggest a code ban (please note this doesn’t concern LLM-based code reviews) · curl/curl · Discussion #20972 · GitHub
▻https://github.com/curl/curl/discussions/20972
I’m concerned about #generative #AI #LLM #code in #curl, including AI auto completion use in editors, and I’m wondering whether the project should adopt a policy to ban it. Please note this doesn’t involve “passive” uses of generative AI where no output of the AI is committed into the code base and potentially “tainting” the code base, e.g. having the AI comment on potential issues with a commit using natural language.
Avec une réponse de badger/Daniel.
Curl ont été les premiers à se rendre compte de la misère que peut apporter les détections de faille de sécurité dans leur code.
Comme ils sont présents sur des plateformes de détection de faille contre rémunération, ça attire de nombreux opportunistes, qui utilisent totalement l’IA. Et ca a donné naissance à de fausses detection, carrément hilarantes.
Action A = totalement de la merde
Action B = utiliser curl
Conclusion = curl fait de la merde.
Tellement risible.
The end of the curl bug-bounty | daniel.haxx.se
▻https://daniel.haxx.se/blog/2026/01/26/the-end-of-the-curl-bug-bounty
tldr: an attempt to reduce the terror reporting.
There is no longer a #curl #bug-bounty program. It officially stops on January 31, 2026.
After having had a few half-baked previous takes, in April 2019 we kicked off the first real curl bug-bounty with the help of #Hackerone, and while it stumbled a bit at first it has been quite successful I think.
We attracted skilled researchers who reported plenty of actual vulnerabilities for which we paid fine monetary rewards. We have certainly made curl better as a direct result of this: 87 confirmed vulnerabilities and over 100,000 USD paid as rewards to researchers. I’m quite happy and proud of this accomplishment.
(...)
There are these three bad trends combined that makes us take this step: the mind-numbing #AI_slop, humans doing worse than ever and the apparent will to poke holes rather than to help.
(...)
nixCraft 🐧"curl, which is one of the most…" - Mastodon
▻https://mastodon.social/@nixCraft/115910328009783851
#curl, which is one of the most popular CLI/API tools for network requests and data transfer on Linux/Unix, is to discontinue its #HackerOne #bug_bounty program due to “too strong incentives to find and make up ’problems’ in bad faith that cause overload and abuse”.
The authors simply cannot keep up with #LLM-generated #fake #security reports created to collect money using bots. So, it now shuts down at the end of January 2026. This is why we can’t have good things
▻https://github.com/curl/curl/pull/20312
Plusieurs trolls pour commenter sur Github et dont l’intervention a été masquée parce que qualifiée d’abus, dont, un aperçu, laissé par @badger lui même :
bagder commented 4 days ago
- So luddites laugh at how bad vibecoding is, but when AI finds more bugs than code in a human project, they take down the bounty instead of fixing them.
Feel free to point out all the bugs you say we have not fixed.
;xc::.
.,;lkOo.
.,'cxkd,
'c;cc:l'
...',:ldoc;,.
'cdddoodood:
.:oddoc:;;:ldo'
.:dko:'.';:ccc' .'.
.:lkxc,.',:ccc;,,,',col.
':dxl,.':llc;,;;::;;::.
'odc,;:dkdl,........
.odc;cokOxdl,.
.::,,;;coxkOOko,.
.:,;,,,,,;:codkkko:,
.:;:clccc;,:;;;:coxxx,
'l:;:ccc:'. .,:':c;lxd'
..,;,;;cc;:cc;'. ;l;lxd'
,clc;cl::clol:;:l; .;,:oo'
.loooc::;;;c;...'' .,;cl'
'llll:;;..... .'':l'
:lo;. .,;o:.
:ol. .;;oxdc;,
.. ':coooc;
..... curl ascii.live/forrest
#wget Removed from #ubuntu_server 25.10 Default Install
▻https://www.omgubuntu.co.uk/2025/08/ubuntu-server-25-10-replaces-wget-with-wcurl
Ubuntu Server 25.10 removes wget from its default installation, in favour of the wcurl tool. Here’s why the change was made and if it’ll affect you. You’re reading wget Removed from Ubuntu Server 25.10 Default Install, a blog post from OMG! Ubuntu. Do not reproduce elsewhere without permission.
#News #curl #Ubuntu_25.10
curl -v ►https://google.com - YouTube
►https://www.youtube.com/watch?v=atcqMWqB3hw
J’ai toujours pensé qu’il y avait un nain jaune qui pédalait dans les ordinateurs, sinon, comment voulez-vous que ça marche.
Mais je ne savais pas qu’il chantait en travaillant. Et pourtant, on en tient la preuve :
daniel:// stenberg://: »Do NOT. I repeat. Do NOT remove curl.exe from your Windows System32 folder« - Framapiaf
▻https://framapiaf.org/@bagder@mastodon.social/110252391295970090
Do NOT. I repeat. Do NOT remove #curl.exe from your Windows System32 folder to silence a (stupid) security scanner. It will lead to tears and sorrows.
And if you do, please don’t ask me for help when you’ve broken your Windows install. I can’t fix that.
Why do people remove it? Because #NVD has exaggerated a curl security flaw to an inflated level, and now “security scanners” insist that the bundled curl executable has a “high severity” security flaw and scaremongers people into removing it.
And then they realize #Windows update refuses to work.
Are we sure this is the best we can do?
#curl
deleting system32\curl.exe | daniel.haxx.se
▻https://daniel.haxx.se/blog/2023/04/24/deleting-system32curl-exe
Let me tell you a story about how Windows users are deleting files from their installation and as a consequence end up in tears.
Background
The real and actual curl tool has been shipped as part of Windows 10 and Windows 11 for many years already. It is called curl.exe and is located in the System32 directory.
Microsoft ships this bundled with its Operating system. They get the code from the curl project but Microsoft builds, tests, ships and are in all ways responsible for their operating system.
openssl - SSL certificate problem : certificate has expired - Stack Overflow
▻https://stackoverflow.com/questions/69387175/git-for-windows-ssl-certificate-problem-certificate-has-expired/69400014#69400014
La méthode sous Debian pour forcer la désactivation du certificat racine DST_Root_CA_X3.crt de LetsEncrypt expiré au 30/09/2021
Symptôme typique : les requêtes curl retournent
Notice: SSL certificate problem: certificate has expired
À 23 ans, #cURL se rend utile partout
▻https://framablog.org/2021/05/29/a-23-ans-curl-se-rend-utile-partout
Non, ce n’est pas une marque de biscuits apéritifs aux cacahuètes, mais un outil logiciel méconnu qui mérite pourtant de faire partie de notre culture numérique. On révise ? Bien qu’ignoré de la plupart des internautes, il est d’un usage familier … Lire la suite
#Libres_Logiciels #libcurl #Stenberg #système_d'exploitation
youtube-dl/README.md at master · ytdl-org/youtube-dl
▻https://github.com/ytdl-org/youtube-dl/blob/master/README.md#readme
Google Authentication with CURL | Daimto
▻https://www.daimto.com/google-authentication-with-curl
(non testé)
Il était un sport : le #curling
▻https://www.rts.ch/play/tv/120-minutes/video/il-etait-un-sport-le-curling?id=11078584
#sport... et un peu d’#humour !
#Suisse #La_Brévine #Brévine
“A short while ago curl‘s 230th command line option was added (it was —mail-rcpt-allowfails). Two hundred and thirty command line options! [...] Is this manageable? Can we do something about it?”
▻https://daniel.haxx.se/blog/2020/02/20/the-command-line-options-we-deserve
Very good text about user interface design, here for a command-line program, #curl. Read it if you design interfaces!
#UI #CLI #command_line
I don’t think a very advanced tool can remain easy to use in all circumstances. I think the aim should be to keep the commonly use cases easy.
Voir aussi le « how to » pour copier les requêtes d’un navigateur web comme curl : ▻https://daniel.haxx.se/blog/2015/11/23/copy-as-curl
The Internet Relies on People Working for Free - OneZero
▻https://onezero.medium.com/the-internet-relies-on-people-working-for-free-a79104a68bcc
▻https://miro.medium.com/focal/1200/632/52/50/0*93mCYPVf551dbAQY
But when software used by millions of people is maintained by a community of people, or a single person, all on a volunteer basis, sometimes things can go horribly wrong. The catastrophic Heartbleed bug of 2014, which compromised the security of hundreds of millions of sites, was caused by a problem in an open-source library called OpenSSL, which relied on a single full-time developer not making a mistake as they updated and changed that code, used by millions. Other times, developers grow bored and abandon their projects, which can be breached while they aren’t paying attention.
It’s hard to demand that programmers who are working for free troubleshoot problems or continue to maintain software that they’ve lost interest in for whatever reason — though some companies certainly try. Not adequately maintaining these projects, on the other hand, makes the entire tech ecosystem weaker. So some open-source programmers are asking companies to pay, not for their code, but for their support services.
Daniel Stenberg is one of those programmers. He created cURL, one of the world’s most popular open-source projects.
Guzzle, PHP HTTP client — Guzzle Documentation
▻http://docs.guzzlephp.org/en/stable
Guzzle is a PHP HTTP client that makes it easy to send HTTP requests and trivial to integrate with web services.
– Simple interface for building query strings, POST requests, streaming large uploads, streaming large downloads, using HTTP cookies, uploading JSON data, etc...
– Can send both synchronous and asynchronous requests using the same interface.
– Abstracts away the underlying HTTP transport, allowing you to write environment and transport agnostic code; i.e., no hard dependency on cURL, PHP streams, sockets, or non-blocking event loops.
(en relation avec le ticket ▻https://core.spip.net/issues/3973 de SPIP)
cURL : Dialogue avec une API en PHP - Max-Koder
▻http://max-koder.fr/2017/05/05/curl-dialogue-api-php
Exemples d’utilisations de cURL et de ses options pour échanger des données avec une API (GET/POST).
Voir aussi : « Exécuter une requête asynchrone avec PHP et cURL » ▻http://max-koder.fr/2017/05/11/executer-une-requete-asynchrone-avec-php-et-curl
mastimap/scripts at master · #clochix/mastimap · GitHub
▻https://github.com/clochix/mastimap/tree/master/scripts
"You’ll find inside this folder some scripts interact with #mastodon from the command line. This scripts depend on the two most useful tools for Web browsing: #curl and jq.
Top 8 des petites galères des meufs aux cheveux bouclés illustrées, par Cassandra Calin
▻http://www.topito.com/top-petites-galeres-meufs-cheveux-boucles-illustrees-cassandra-calin
Comment dresser sa crinière en une seconde chrono ?
Ça débat sec sur GitHub
▻https://github.com/whatwg/url/issues/118
En gros, d’un côté les pragmatiques (chrome) qui veulent standardiser l’existant, et de l’autre les partisans d’un vrai processus ouvert de standardisation qui prend en compte tous les avis (position que je partage même si je n’ai rien à voir dans l’histoire).
Extraire les mots des titres des 100 premières pages des #SERP #Google
▻http://www.dsfc.net/developpement/php-developpement/extraire-mots-titres-100-premieres-pages-serp-google
Je vais vous apprendre à tailler dans les SERPs !
#Php #cURL #Expressions_rationnelles #Expressions_régulières #Formateur_Expressions_régulières #Formateur_PHP #Formateur_Scraping #Formateur_Web_Scraping #Formation_Expressions_régulières #Google_SERP #Pages_de_résultats_des_moteurs_de_recherche #php #Scraping #Startpage #Web_Scraping
Extraire les 100 premiers liens des SERP Google
▻http://www.dsfc.net/developpement/php-developpement/extraire-100-premiers-liens-serp-google
Il faut très peu de ligne de code en #Php pour scrapper ou extraire les 100 1ers liens des pages de résultats du moteur de recherche Google !
#cURL #Expressions_rationnelles #Expressions_régulières #Formateur_Expressions_régulières #Formateur_PHP #Formateur_Scraping #Formateur_Web_Scraping #Formation_Expressions_régulières #Google_SERP #php #Scraping #Scrapping #Startpage #Web_Scraping