search

NICMx / Jool

SIIT and NAT64 for Linux
GNU General Public License v2.0
328 stars 66 forks source link

ERROR: The certificate of ‘jool.mx’ is not trusted. #346

Closed Martin-Luther closed 4 years ago

Martin-Luther commented 4 years ago

(Nov. 2020) Hi, when I launch :

wget https://jool.mx/download/jool-4.1.4.tar.gz

I get

ERROR: The certificate of ‘jool.mx’ is not trusted.
ERROR: The certificate of ‘jool.mx’ has expired.

I had to do :

wget https://jool.mx/download/jool-4.1.4.tar.gz --no-check-certificate
ydahhrk commented 4 years ago

What's the output of date?

Martin-Luther commented 4 years ago 
Fri 13 Nov 2020 10:46:24 PM CET
ydahhrk commented 4 years ago

What's the output of echo | openssl s_client -connect jool.mx:443 | openssl x509 -noout -dates?

Martin-Luther commented 4 years ago 
depth=2 C = US, ST = New Jersey, L = Jersey City, O = The USERTRUST Network, CN = USERTrust RSA Certification Authority
verify return:1
depth=1 C = GB, ST = Greater Manchester, L = Salford, O = Sectigo Limited, CN = Sectigo RSA Organization Validation Secure Server CA
verify return:1
depth=0 C = MX, postalCode = 64840, ST = Nuevo Leon, L = Monterrey, street = Col. Altavista, street = "Av. Eugenio Garza Sada No. 427 Sur Loc. 4,5 y 6", O = Network Information Center SA de CV, CN = reddog.mx
verify return:1
DONE
notBefore=Jan 20 00:00:00 2020 GMT
notAfter=Jan 19 23:59:59 2022 GMT
ydahhrk commented 4 years ago

Just to clarify: I'm getting the same output from openssl, but my wget works fine without --no-check-certificate

Do you have a GUI? Can you download the file with, say, a browser, see if it also complains?

Martin-Luther commented 4 years ago

With the browser (safari) and doing this from mac os terminal, no problem ... I get the error with my Debian 10 terminal ... I just tried again and it went away ...