Linux下使用curl命令访问https问题

用curl访问htttps网址报错证书过期或者证书不对

curl https://localhost/web/aaa.php

curl: (60) Peer certificate cannot be authenticated with known CA certificates
More details here: http://curl.haxx.se/docs/sslcerts.html

curl performs SSL certificate verification by default, using a "bundle"
 of Certificate Authority (CA) public keys (CA certs). If the default
 bundle file isn't adequate, you can specify an alternate file
 using the --cacert option.
If this HTTPS server uses a certificate signed by a CA represented in
 the bundle, the certificate verification probably failed due to a
 problem with the certificate (it might be expired, or the name might
 not match the domain name in the URL).
If you'd like to turn off curl's verification of the certificate, use
 the -k (or --insecure) option.

查阅资料之后发现是证书问题，需要加上证书才能访问。需要使用以下命令

curl  --tlsv1 https://localhost/web/aaa.php

在使用这个命令之前，要保证本地的证书有效，否则仍然会不成功。

如果本地没有证书或者证书过旧需要下载最新的 http://curl.haxx.se/ca/cacert.pem 

下载后放到/etc/pki/tls/certs/ca-bundle.crt路径下，如果已存在可以先将之前的备份，然后追加进来。

再次执行

如果还是有错按照错误提示使用-k参数关闭证书验证

curl  --tlsv1 -k https://localhost/web/aaa.php

ok可以执行了