devonfw / ide

Tool to automate setup and update of development environment (esp. for Java projects).
Apache License 2.0
35 stars 101 forks source link

GCViewer setup results in curl: (60) SSL certificate problem: unable to get local issuer certificate #1255

Open CREITZ25 opened 1 year ago

CREITZ25 commented 1 year ago

Expected behavior

As a user, I want to install the gcviewer with the command "devon gcviewer setup"

Actual behavior

Installation aborted with the message curl: (60) SSL certificate problem: unable to get local issuer certificate

Steps to reproduce (bug) / Use Case of feature request (enhancement)

  1. devon gcviewer setup

Success: run command mkdir Starting installation of gcviewer in version 1.36 to /c/Users/creitz/Projects/devonfw/software/gcviewer Trying to download gcviewer-1.36-windows.jar from https://sourceforge.net/projects/gcviewer/files/gcviewer-1.36.jar % Total % Received % Xferd Average Speed Time Time Time Current Dload Upload Total Spent Left Speed 100 718 0 718 0 0 1910 0 --:--:-- --:--:-- --:--:-- 1914 100 734 0 734 0 0 1206 0 --:--:-- --:--:-- --:--:-- 1206 100 961 0 961 0 0 1152 0 --:--:-- --:--:-- --:--:-- 1152 0 0 0 0 0 0 0 0 --:--:-- 0:00:01 --:--:-- 0 curl: (60) SSL certificate problem: unable to get local issuer certificate More details here: https://curl.se/docs/sslcerts.html

curl failed to verify the legitimacy of the server and therefore could not establish a secure connection to it. To learn more about this situation and how to fix it, please visit the web page mentioned above. Failed to download https://sourceforge.net/projects/gcviewer/files/gcviewer-1.36.jar with exit code 60

**** ATTENTION **** Download of gcviewer in version 1.36 failed after trying 1 url(s). We are sorry for the inconvenience. Please check the above errors, resolve them and try again.

Related/Dependent Issues

Comments/Hints:

On MacOS it works fine. Download with a browser and the same urls works fine, too.

Affected version:

alfeilex commented 1 year ago

It seems that this error only occurs with VPN connection

maybeec commented 1 year ago

Should we give a prompt then to ask the user to ignore the certificate validation?

alfeilex commented 1 year ago

Further, I wonder why Chrome uses Balitmore CyberTrust Root certificate and Firefox CapgeminiPKIIssuingCA1 in VPN?

Sometimes, also in VPN, Firefox uses the Balitmore CyberTrust Root certificate and it works.... how is the certificate selected?

alfeilex commented 1 year ago

We will try to fix this in the future in Java