#1061: Certificate failure --------------------------------------+------------------------------------- Reporter: eschnett | Owner: Type: defect | Status: reopened Priority: minor | Milestone: Component: EinsteinToolkit website | Version: Resolution: | Keywords: --------------------------------------+------------------------------------- Changes (by rhaas):
* priority: major => minor * resolution: invalid => * status: closed => reopened * component: EinsteinToolkit thorn => EinsteinToolkit website
Comment:
This is partially happening again. Now Firefox is happy with the certificate for trac.einsteintoolkit.org but eg. wget is not happy with it
{{{ rhaas@horizon:.../EinsteinEOS/EOS_Omni$ wget https://trac.einsteintoolkit.org/raw- attachment/ticket/1070/EOS_Omni_Module.F90.diff --2012-10-16 10:01:49-- https://trac.einsteintoolkit.org/raw- attachment/ticket/1070/EOS_Omni_Module.F90.diff Resolving trac.einsteintoolkit.org (trac.einsteintoolkit.org)... 130.39.21.34 Connecting to trac.einsteintoolkit.org (trac.einsteintoolkit.org)|130.39.21.34|:443... connected. ERROR: The certificate of `trac.einsteintoolkit.org' is not trusted. ERROR: The certificate of `trac.einsteintoolkit.org' hasn't got a known issuer. }}}
with curl the error is:
{{{ rhaas@horizon:.../EinsteinEOS/EOS_Omni$ curl https://trac.einsteintoolkit.org/raw- attachment/ticket/1070/EOS_Omni_Module.F90.diff curl: (60) SSL certificate problem: unable to get local issuer certificate More details here: http://curl.haxx.se/docs/sslcerts.html
curl performs SSL certificate verification by default, using a "bundle" of Certificate Authority (CA) public keys (CA certs). If the default bundle file isn't adequate, you can specify an alternate file using the --cacert option. If this HTTPS server uses a certificate signed by a CA represented in the bundle, the certificate verification probably failed due to a problem with the certificate (it might be expired, or the name might not match the domain name in the URL). If you'd like to turn off curl's verification of the certificate, use the -k (or --insecure) option. }}}