Re: [Bug-wget] Unable to validate certificate

[Ray Satiro]

Hi

> The  error that I am getting is:

>     --2011-02-03 11:57:57--  
>https://dwdev.deckers.com/AccertifyIntranet/FraudListener.aspx
>      Resolving dwdev.deckers.com... 10.3.0.162
>     Connecting to  dwdev.deckers.com|10.3.0.162|:443... connected.
>     ERROR: cannot  verify dwdev.deckers.com's certificate, issued by 
>`/C=US/O=Thawte,  Inc./CN=Thawte SSL CA':
>       Unable to locally verify the  issuer's authority.
>     To connect to dwdev.deckers.com insecurely,  use `--no-check-certificate'.
>     Unable to establish SSL  connection.
> 
> I have verified that the certificate (and all intermediate  certificates) are 
>properly installed. I do not have the option of using the  
>"--no-check-certificate" switch so am stuck trying to get this to  work.
> 

Are you sure? If the certificate is valid that should work. Your wgetrc should 
have a line like this
ca_certificate = C:\System\Curl\curl-ca-bundle.crt

Check your wgetrc for ca_certificate/ca-certificate and see where it's pointing 
to.
If you need a cert file for general use you can use Mozilla's CA certs. You can 
convert yourself or
http://curl.haxx.se/ca/
download cacert.pem (right-click save as)

grep -v "^## Converted at: " cacert.pem | sha256
b9ae94e8cc91d9f8135f0d84dc3cf0d91456e99288fcb7b2ea3bb27d50378a68

The conversion date changes but the certs are the same (since september 2009).