GetPoplog / Seed

Scripts for getting Poplog onto your Linux machine
MIT License
7 stars 3 forks source link

SSL certificate verification failure in GetPoplog.sh Ubuntu 22.04 #141

Open truedat101 opened 7 months ago

truedat101 commented 7 months ago

These days wget likes you to verify the referenced domains. I verified that www.cs.bham.ac.uk doesn't have a proper SSL certificate configured. To fix this , add --no-check-certificate to script, or update the sub domain SSL certas.

wget https://www.cs.bham.ac.uk/research/projects/poplog/V16/DL/packages-V16.tar.bz2
--2024-02-12 18:04:52--  https://www.cs.bham.ac.uk/research/projects/poplog/V16/DL/packages-V16.tar.bz2
Resolving www.cs.bham.ac.uk (www.cs.bham.ac.uk)... 52.56.180.67
Connecting to www.cs.bham.ac.uk (www.cs.bham.ac.uk)|52.56.180.67|:443... connected.
ERROR: cannot verify www.cs.bham.ac.uk's certificate, issued by ‘CN=R3,O=Let's Encrypt,C=US’:
  Unable to locally verify the issuer's authority.
To connect to www.cs.bham.ac.uk insecurely, use `--no-check-certificate'.
truedat101 commented 7 months ago

Affects curl commands in make as well.

truedat101 commented 7 months ago

The ideal would be to host these files on a secure domain. The easiest recommendation is to put these on Amazon S3 as a public read only object, assuming there is no option to fix the DNS to use https.

The fallback workaround:

wget --insecure

curl -k