Skip to content

Instantly share code, notes, and snippets.

@JensRantil
Created July 30, 2014 19:46
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save JensRantil/0d905461cf018c5e1ab7 to your computer and use it in GitHub Desktop.
Save JensRantil/0d905461cf018c5e1ab7 to your computer and use it in GitHub Desktop.
Broken SSL verification Datastax
root@precise64:/etc/apt/sources.list.d# curl -L https://debian.datastax.com/debian/repo_key | sudo apt-key add -
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0curl: (60) SSL certificate problem, verify that the CA cert is OK. Details:
error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed
More details here: http://curl.haxx.se/docs/sslcerts.html
curl performs SSL certificate verification by default, using a "bundle"
of Certificate Authority (CA) public keys (CA certs). If the default
bundle file isn't adequate, you can specify an alternate file
using the --cacert option.
If this HTTPS server uses a certificate signed by a CA represented in
the bundle, the certificate verification probably failed due to a
problem with the certificate (it might be expired, or the name might
not match the domain name in the URL).
If you'd like to turn off curl's verification of the certificate, use
the -k (or --insecure) option.
gpg: no valid OpenPGP data found.
@JensRantil
Copy link
Author

Executed on a vanilla Vagrant box running Ubuntu Precise 64-bit.

@JensRantil
Copy link
Author

Workaround: Use http instead of https.

@JensRantil
Copy link
Author

Seem to validate fine in my Chrome browser. At least downloaded the file without complaining.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment