Linux下用libcurl（C语言）实现HTTPS文件下载及问题排查

Hey there! Let's break this down into two clear sections—first, a step-by-step guide to using libcurl in C on Linux for HTTPS file downloads, then troubleshooting your specific issue with the local OpenSSL server.

Here's a robust, minimal example that includes proper error handling (critical for debugging) and follows libcurl best practices:

#include <stdio.h>
#include <curl/curl.h>

// Callback function to write downloaded data to a local file
size_t write_to_file(void *ptr, size_t size, size_t nmemb, FILE *stream) {
    return fwrite(ptr, size, nmemb, stream);
}

int main(void) {
    CURL *curl_handle = NULL;
    CURLcode request_status;
    FILE *output_file = NULL;

    // Initialize libcurl's global resources
    curl_global_init(CURL_GLOBAL_DEFAULT);
    curl_handle = curl_easy_init();

    if (curl_handle) {
        const char *target_url = "https://your-local-server/your-file";
        const char *save_path = "downloaded_file";

        // Open file for binary write
        output_file = fopen(save_path, "wb");
        if (!output_file) {
            perror("Failed to open output file");
            goto cleanup;
        }

        // Configure libcurl options
        curl_easy_setopt(curl_handle, CURLOPT_URL, target_url);
        // Route downloaded data to our file-writing callback
        curl_easy_setopt(curl_handle, CURLOPT_WRITEFUNCTION, write_to_file);
        curl_easy_setopt(curl_handle, CURLOPT_WRITEDATA, output_file);

        // Optional: Disable cert verification ONLY for self-signed test servers
        // curl_easy_setopt(curl_handle, CURLOPT_SSL_VERIFYPEER, 0L);
        // curl_easy_setopt(curl_handle, CURLOPT_SSL_VERIFYHOST, 0L);

        // Execute the download request
        request_status = curl_easy_perform(curl_handle);

        // Check for libcurl-specific errors (perror won't catch these!)
        if (request_status != CURLE_OK) {
            fprintf(stderr, "Download failed: %s\n", curl_easy_strerror(request_status));
        } else {
            printf("File downloaded successfully!\n");
        }

cleanup:
        // Clean up resources
        if (output_file) fclose(output_file);
        curl_easy_cleanup(curl_handle);
    }

    curl_global_cleanup();
    return 0;
}

Key notes for this code:

• Write Callback: This tells libcurl exactly where to send the downloaded data (in this case, a local file).
• Libcurl Error Handling: Forget perror for libcurl issues—use curl_easy_strerror() to get human-readable, libcurl-specific error messages.
• HTTPS Cert Handling: If your local server uses a self-signed certificate, uncomment the two CURLOPT_SSL_* lines (but remove them in production!).

Compile with your existing command (it's correct):

gcc curl.c -o curl.out -lcurl

Your issue with perror not outputting anything makes sense—libcurl doesn't set standard Unix errno values for its errors, so perror can't help here. Let's walk through actionable debugging steps:

• Enable Verbose Logging: Add this line right before curl_easy_perform() to get a play-by-play of the HTTPS handshake and request:

  curl_easy_setopt(curl_handle, CURLOPT_VERBOSE, 1L);
  

  This will print details like TLS version used, certificate validation steps, and exactly where the connection fails (e.g., "SSL certificate problem: self signed certificate").

• Test with Command-Line Curl First: Isolate whether the issue is your code or the server by running:

  curl -v https://your-local-server/your-file
  

  If this fails, the problem is with your server config (e.g., incorrect cert permissions, wrong port, or untrusted cert). If it works, double-check your C code for missing options (like the write callback or incorrect URL).

• Verify libcurl's SSL Support: Ensure your installed libcurl uses OpenSSL (matches your server's setup). Run:

  curl --version
  

  Look for "OpenSSL" in the "Features" line. If you see another library (like NSS), install the OpenSSL-backed libcurl dev package (e.g., sudo apt install libcurl4-openssl-dev on Debian/Ubuntu).

• Trust Your Server's Cert: Instead of disabling verification, you can tell libcurl to trust your server's CA certificate directly:

  curl_easy_setopt(curl_handle, CURLOPT_CAINFO, "/path/to/your/server-ca.crt");
  

  This is safer for testing than disabling verification entirely.

内容的提问来源于stack exchange，提问作者Bali Vinayak