Re: SSL certificate problem

Hanspeter Niederstrasser <[email protected]>
Newsgroups gmane.os.apple.fink.general
Organization Snaggled Works
Message-ID <[email protected]>
On 10/8/21 3:57 AM, Luigi Ernesto Zanotti wrote:
> Today, after a normal 'fink selfupdate', I got the following:
> 
> ~> fink update-all
> Information about 14263 packages read in 2 seconds.
> The following 2 packages will be installed or updated:
>   fftw3 fftw3-shlibs
> curl --connect-timeout 30 -f -L -A 'fink/0.45.3' -O 
> http://distfiles.master.finkmirrors.net/distfiles/fftw-3.3.10.tar.gz
>    % Total    % Received % Xferd  Average Speed   Time    Time Time  
> Current
>                                   Dload  Upload   Total   Spent Left  Speed
> 100   375  100   375    0     0    915      0 --:--:-- --:--:-- 
> --:--:--   914
>    0     0    0     0    0     0      0      0 --:--:-- --:--:-- 
> --:--:--     0
> curl: (60) SSL certificate problem: certificate has expired
> More details here: https://curl.haxx.se/docs/sslcerts.html
> 
> curl performs SSL certificate verification by default, using a "bundle"
>   of Certificate Authority (CA) public keys (CA certs). If the default
>   bundle file isn't adequate, you can specify an alternate file
>   using the --cacert option.
> If this HTTPS server uses a certificate signed by a CA represented in
>   the bundle, the certificate verification probably failed due to a
>   problem with the certificate (it might be expired, or the name might
>   not match the domain name in the URL).
> If you'd like to turn off curl's verification of the certificate, use
>   the -k (or --insecure) option.
> HTTPS-proxy has similar options --proxy-cacert and --proxy-insecure.
> ### execution of curl failed, exit code 60
> Downloading the file "fftw-3.3.10.tar.gz" failed.
> 
> What does that mean?
> Thanks in advance and regards,
>                                                              Luigi Zanotti
> P.S.: System is Mojave 10.14.6

This is a problem with the system-curl, which is quite old (even on 
10.14). If you install our package curl, then the downloads should work 
because it does have newer certificates.

Hanspeter



_______________________________________________
Fink-users mailing list
[email protected]
List archive:
https://sourceforge.net/p/fink/mailman/fink-users/
Subscription management:
https://lists.sourceforge.net/lists/listinfo/fink-users
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.