LinuxQuestions.org
Latest LQ Deal: Linux Power User Bundle
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Slackware
User Name
Password
Slackware This Forum is for the discussion of Slackware Linux.

Notices


Reply
  Search this Thread
Old 07-17-2011, 02:59 AM   #1
srgrn
LQ Newbie
 
Registered: Jul 2011
Distribution: Slackware 13.37
Posts: 3

Rep: Reputation: Disabled
updating to latest root-CA certificates in slackware 13.37


Hi,
after installing Slackware 13.37 i've noticed that while when in the Xwindows enviroment inside the mozilla firefox i can surf freely i cannot use wget with the same freedom.
i get the following error with wget
Code:
wget https://dropbox.com
--2011-07-17 10:54:58--  https://dropbox.com/
Resolving dropbox.com (dropbox.com)... 199.47.216.179, 199.47.217.179
Connecting to dropbox.com (dropbox.com)|199.47.216.179|:443... connected.
ERROR: cannot verify dropbox.com's certificate, issued by "/C=US/ST=Arizona/L=Scottsdale/O=GoDaddy.com, Inc./OU=http://certificates.godaddy.com/repository/CN=Go Daddy Secure Certification Authority/serialNumber=07969287":
  Unable to locally verify the issuer's authority.
To connect to dropbox.com insecurely, use '--no-check-certificate'.
how do i update the machine to use the latest root ca's i have downloaded and manually installed ca-certificates_20110502.tar.gz but it still refuse to work with wget.

how can i install the root ca so it will accept ssl when using wget?

Thanks
Eran
 
Old 07-17-2011, 06:06 AM   #2
sahko
Senior Member
 
Registered: Sep 2008
Distribution: Slackware
Posts: 1,041

Rep: Reputation: Disabled
wrong post

Last edited by sahko; 07-17-2011 at 10:08 AM.
 
Old 07-17-2011, 10:58 AM   #3
srgrn
LQ Newbie
 
Registered: Jul 2011
Distribution: Slackware 13.37
Posts: 3

Original Poster
Rep: Reputation: Disabled
updating to the latest openssl (1.0d) didn't help
i have searched some more and it simply said that his message
"Unable to locally verify the issuer's authority."

is caused by missing intermidiate certificates
but is there a way to force getting those intemediate certificates?
 
Old 07-17-2011, 06:59 PM   #4
willysr
Senior Member
 
Registered: Jul 2004
Location: Jogja, Indonesia
Distribution: Slackware-Current
Posts: 3,838

Rep: Reputation: 1113Reputation: 1113Reputation: 1113Reputation: 1113Reputation: 1113Reputation: 1113Reputation: 1113Reputation: 1113Reputation: 1113
try adding "--no-check-certificate" as the wget parameter
 
Old 07-17-2011, 11:28 PM   #5
srgrn
LQ Newbie
 
Registered: Jul 2011
Distribution: Slackware 13.37
Posts: 3

Original Poster
Rep: Reputation: Disabled
i eventually found my problem, for some reason when i did it before updating the certificates and upgrading the openssl to openssl1.0d it haven't worked
i followed the instructions in http://gagravarr.org/writing/openssl...tml#ca-openssl and ran the following commands
Code:
cd /etc/ssl/certs
foreach a (`ls *.pem`)
echo $a
ln -s $a `openssl x509 -hash -noout -in $a`.0 
end
this solved the problem and now i can access https sites like dropbox from cli.
thanks
 
1 members found this post helpful.
Old 07-18-2011, 06:30 AM   #6
sahko
Senior Member
 
Registered: Sep 2008
Distribution: Slackware
Posts: 1,041

Rep: Reputation: Disabled
Thanks for posting the solution.
 
Old 07-18-2011, 07:49 PM   #7
andrew.46
Member
 
Registered: Oct 2007
Distribution: Slackware
Posts: 910

Rep: Reputation: 200Reputation: 200Reputation: 200
Hmmmm.... would the perl script /usr/bin/c_rehash have been of use here?
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Updating to the latest Kernel? manolakis Debian 13 05-26-2007 03:25 PM
No Internet After Updating to Latest Kernel poochdog Linux - Networking 6 10-17-2005 09:26 PM
Problem updating to the latest version of XFCE Shagrath239 Slackware 5 02-10-2005 12:25 PM
Updating KDE to Latest???? JapanFred Linux - Newbie 5 03-28-2003 04:17 PM
SSL Certificates and root authorities antken General 2 01-24-2003 10:55 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Slackware

All times are GMT -5. The time now is 12:15 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration