CODEWITHSUNDEEP
ubuntuauthenticationwget
negfrequency
negfrequency

Reputation: 1897

Certificate error message whenever I use wget

Whenever I use wget for the below or typically anything,

sudo wget -O - "https://www.dropbox.com/download?plat=lnx.x86_64" | tar xzf -

I receive an error stating:

--2020-04-24 20:41:33--  https://www.dropbox.com/download?plat=lnx.x86_64
Resolving www.dropbox.com (www.dropbox.com)... 162.125.6.1, 2620:100:601c:1::a27d:601
Connecting to www.dropbox.com (www.dropbox.com)|162.125.6.1|:443... connected.
ERROR: cannot verify www.dropbox.com's certificate, issued by ‘CN=DigiCert SHA2 Extended Validation Server CA,OU=www.digicert.com,O=DigiCert Inc,C=US’:
  Unable to locally verify the issuer's authority.
To connect to www.dropbox.com insecurely, use `--no-check-certificate'.

gzip: stdin: unexpected end of file
tar: Child returned status 1
tar: Error is not recoverable: exiting now

This is causing broader connection problems, but this is the most common and immediate one that I cannot seem to find much support on. Using Ubuntu 20.04 and literally just did a re-image of my computer 3 hours ago (probably has something to do with this...)

EDIT Additional Information from running wget -d cdn.kernel.org/pub/linux/kernel/v4.x/linux-4.17.2.tar.xz:

wget -d cdn.kernel.org/pub/linux/kernel/v4.x/linux-4.17.2.tar.xz
DEBUG output created by Wget 1.20.3 on linux-gnu.

Reading HSTS entries from /home/negfrequency/.wget-hsts
URI encoding = ‘UTF-8’
Converted file name 'linux-4.17.2.tar.xz' (UTF-8) -> 'linux-4.17.2.tar.xz' (UTF-8)
--2020-04-24 20:33:17--  http://cdn.kernel.org/pub/linux/kernel/v4.x/linux-4.17.2.tar.xz
Resolving cdn.kernel.org (cdn.kernel.org)... 151.101.201.176, 2a04:4e42:50::432
Caching cdn.kernel.org => 151.101.201.176 2a04:4e42:50::432
Connecting to cdn.kernel.org (cdn.kernel.org)|151.101.201.176|:80... connected.
Created socket 3.
Releasing 0x00005588dc6a7f10 (new refcount 1).

---request begin---
GET /pub/linux/kernel/v4.x/linux-4.17.2.tar.xz HTTP/1.1
User-Agent: Wget/1.20.3 (linux-gnu)
Accept: */*
Accept-Encoding: identity
Host: cdn.kernel.org
Connection: Keep-Alive

---request end---
HTTP request sent, awaiting response... 
---response begin---
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/x-xz
Last-Modified: Sat, 16 Jun 2018 07:34:25 GMT
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Accept-Ranges: bytes
Age: 4
Content-Length: 102167060
Accept-Ranges: bytes
Date: Sat, 25 Apr 2020 00:33:22 GMT
Via: 1.1 varnish
Connection: keep-alive
X-Served-By: cache-dca17760-DCA
X-Cache: MISS
X-Cache-Hits: 0
X-Timer: S1587774798.899562,VS0,VE4554

---response end---
200 OK
Registered socket 3 for persistent reuse.
Length: 102167060 (97M) [application/x-xz]
Saving to: ‘linux-4.17.2.tar.xz’

linux-4.17.2.tar.xz 100%[===================>]  97.43M  6.87MB/s    in 15s     

2020-04-24 20:33:37 (6.35 MB/s) - ‘linux-4.17.2.tar.xz’ saved [102167060/102167060]

EDIT:

Additional information /usr/bin/wget is the path:

ii ca-certificates 20190110ubuntu1 all Common CA certificates
ii wget 1.20.3-1ubuntu1 amd64 retrieves files from the web

Upvotes: 3

Views: 4078

Answers (1)

Ron
Ron

Reputation: 6601

This error would pop up when the website you re trying to talk to does not have a valid SSL certificate. And if that is the case, you would not be able to resolve THEIR issue with THEIR ssl, unless you own that remote website.

Thus the Suggestion from wget: to use --no-check-certificate parameter, so wget will not try to validate the SSL when connecting.

If your error is: Unable to locally verify the issuer's authority, then you should make sure that your server/computer TIME is correct.

Upvotes: 2

Related Questions