search

AdoptOpenJDK / openjdk-api

DEPRECATED and replaced by of https://github.com/AdoptOpenJDK/openjdk-api-v3 - See README
https://api.adoptopenjdk.net/README
Apache License 2.0
15 stars 15 forks source link

Cert issues getting sdks from API #154

Closed AdamBrousseau closed 5 years ago

AdamBrousseau commented 5 years ago 
$ wget -O bootjdk11.tar.gz 'https://api.adoptopenjdk.net/v2/binary/releases/openjdk11?openjdk_impl=openj9&os=linux&arch=x64&release=latest&type=jdk&heap_size=normal'
--2019-02-12 15:21:02--  https://api.adoptopenjdk.net/v2/binary/releases/openjdk11?openjdk_impl=openj9&os=linux&arch=x64&release=latest&type=jdk&heap_size=normal
Resolving api.adoptopenjdk.net (api.adoptopenjdk.net)... 52.86.98.187, 54.158.139.37
Connecting to api.adoptopenjdk.net (api.adoptopenjdk.net)|52.86.98.187|:443... connected.
ERROR: cannot verify api.adoptopenjdk.net's certificate, issued by ‘CN=Go Daddy Secure Certificate Authority - G2,OU=http://certs.godaddy.com/repository/,O=GoDaddy.com\\, Inc.,L=Scottsdale,ST=Arizona,C=US’:
  Unable to locally verify the issuer's authority.
To connect to api.adoptopenjdk.net insecurely, use `--no-check-certificate'.

Tried with http as well. Blocking our Travis builds at Eclipse OpenJ9

JChrist commented 5 years ago

Same here for me, both wget and curl fail on Ubuntu 18.04

When trying to download a jdk via the API, the download is aborted due to SSL validation error. Sample command: wget -q -O /jdk.tgz "https://api.adoptopenjdk.net/v2/binary/releases/openjdk11?openjdk_impl=hotspot&os=linux&arch=x64&release=latest&type=jdk"

The errors are the same even if trying to hit the base url api.adoptopenjdk.net.

curl error:

# curl -v "https://api.adoptopenjdk.net"
* Rebuilt URL to: https://api.adoptopenjdk.net/
*   Trying 52.86.98.187...
* TCP_NODELAY set
* Connected to api.adoptopenjdk.net (52.86.98.187) port 443 (#0)
* ALPN, offering h2
* ALPN, offering http/1.1
* successfully set certificate verify locations:
*   CAfile: /etc/ssl/certs/ca-certificates.crt
  CApath: /etc/ssl/certs
* TLSv1.2 (OUT), TLS handshake, Client hello (1):
* TLSv1.2 (IN), TLS handshake, Server hello (2):
* TLSv1.2 (IN), TLS handshake, Certificate (11):
* TLSv1.2 (OUT), TLS alert, Server hello (2):
* SSL certificate problem: unable to get local issuer certificate
* stopped the pause stream!
* Closing connection 0
curl: (60) SSL certificate problem: unable to get local issuer certificate
More details here: https://curl.haxx.se/docs/sslcerts.html

curl failed to verify the legitimacy of the server and therefore could not
establish a secure connection to it. To learn more about this situation and
how to fix it, please visit the web page mentioned above.

wget error:

wget "https://api.adoptopenjdk.net"
--2019-02-12 23:25:27--  https://api.adoptopenjdk.net/
Resolving api.adoptopenjdk.net (api.adoptopenjdk.net)... 52.86.98.187, 54.158.139.37
Connecting to api.adoptopenjdk.net (api.adoptopenjdk.net)|52.86.98.187|:443... connected.
ERROR: cannot verify api.adoptopenjdk.net's certificate, issued by 'CN=Go Daddy Secure Certificate Authority - G2,OU=http://certs.godaddy.com/repository/,O=GoDaddy.com\\, Inc.,L=Scottsdale,ST=Arizona,C=US':
  Unable to locally verify the issuer's authority.
To connect to api.adoptopenjdk.net insecurely, use `--no-check-certificate'.
gdams commented 5 years ago

fixed, sorry everyone for the outage