SP randomly failed to validate certificate IDP certicate.

[Cantor, Scott]

> I'm pretty sure that the certificate is the same because I do the tests myself
> in a controlled environment.

Then I have absolutely no idea what to tell you. If it's broken, chances are the bug is in code I don't control.

> How can I the dump certificate on error, as you said? I try to capture TCP
> traffic, but it not a good idea because it is encrypted.

The libcurl category when it's logging verbosely might dump it. If not, there's no way to do anything with what it's seeing, only using separate tools to connect yourself. You can run the beta of course, I just checked and it's logging the certificate now when the connection fails.

The bottom line: if there was a bug this bad, somebody would have seen it by now. At most, I would say you have a problem with your certificate. If it's unusual in some way, maybe it's causing a problem.

-- Scott