wget fails, Certificate not trusted, no known issuer

[maartenvanheek-els]

Windows Version

Windows 11

Windows Build Number

22621.1848

WSL Version

WSL 2

Distro Version

Debian GNU/Linux 12 (bookworm)

WSL Utilities Version

n/a

Describe the bug

Installation fails on the wget step with certificate not trusted error, persists after updating ca-certificates:

myname@device:~$ sudo update-ca-certificates
Updating certificates in /etc/ssl/certs...
0 added, 0 removed; done.
Running hooks in /etc/ca-certificates/update.d...
done.
myname@device:~$ wget -O - https://pkg.wslutiliti.es/public.key | sudo tee -a /etc/apt/trusted.gpg.d/wslu.asc
--2023-07-19 11:30:18--  https://pkg.wslutiliti.es/public.key
Loaded CA certificate '/etc/ssl/certs/ca-certificates.crt'
Resolving pkg.wslutiliti.es (pkg.wslutiliti.es)... 139.162.37.22
Connecting to pkg.wslutiliti.es (pkg.wslutiliti.es)|139.162.37.22|:443... connected.
ERROR: The certificate of ‘pkg.wslutiliti.es’ is not trusted.
ERROR: The certificate of ‘pkg.wslutiliti.es’ doesn't have a known issuer.

Steps to Reproduce

1. Run wget -O - https://pkg.wslutiliti.es/public.key | sudo tee -a /etc/apt/trusted.gpg.d/wslu.asc

Expected behavior

Certificate is trustworty

Additional context

No response

Code of Conduct

• [X] I agree to follow this project's Code of Conduct

[patrick330602]

I have tested on different environment and OS, and cannot reproduce. Can you provide more information on your environment? like whether it is using VPN, etc.

[maartenvanheek-els]

I am on a corporate VPN, but added its root certificate and am able to ping other sites (this was not possible before adding the certificate). However, your statement made me realize that I could try to turn off the VPN, and with that, it installs. Thank you for checking it out!

Can close the issue.