Ssl – cURL or SSL problems, how to solve

curlsslssl-certificate

I keep getting this error:

No cURL data returned for https://XXX.XXXX.XXX:XXXX [0] SSL certificate problem, verify that the CA cert is OK. Details: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed

I am not sure, or I could say, I dont know what is this problem. And how to solve this? Please help!

Best Answer

The error is fairly clear. Essentially what is happening is that the cert on the remote end is either self signed, or signed by an authority that wget isn't recognizing. You can pass the following command while invoking wget to get it to ignore cert errors:

--no-check-certificate

Related Solutions

Ubuntu 10.04/CURL: How to fix/update the CA Bundle

I've been having the same trouble and after poking around a bit found that you can download a package of CA-certs ready for curl on ubuntu directly from the curl dev site.

cd /etc/ssl/certs
sudo wget http://curl.haxx.se/ca/cacert.pem

Now curl uses the most up-to-date bundle and you're good to go.

Ssl – curl SSL issue with RapidSSL certificates

Make sure that you specify www.phaxio.com, and not just phaxio.com. The latter does not provide with a valid certificate, and could be your problem.

https://www.phaxio.com is using a wildcard-certificate. This should validate as long as you specify a prefix to .phaxio.com. This means that phaxio.com is invalid, but www.phaxio.com is valid.

However, phaxio.com actually presents itself with a certificate for an entirely different domain.

The date on the computer you're running curl on could be set to a time outside the certificates validity period. It's valid from 18th September 2011.

The root-certificate list could be too old - the CA-certificate is dated 19th February 2010. (This is probably not the case in Ubuntu 10.10, though).

Best Answer

Related Solutions

Ubuntu 10.04/CURL: How to fix/update the CA Bundle

Ssl – curl SSL issue with RapidSSL certificates

Related Topic