Page 1 of 1

[Website] Broken SSL-Cert

Posted: Fri May 27, 2016 5:50 pm
by chpio
The server SSL-Cert seems to be broken (maybe missing intermediate cert)

Code: Select all

$ curl -fsSL "https://www.factorio.com/get-download/0.12.33/headless/linux64"
curl: (60) server certificate verification failed. CAfile: /etc/ssl/certs/ca-certificates.crt CRLfile: none
More details here: http://curl.haxx.se/docs/sslcerts.html

curl performs SSL certificate verification by default, using a "bundle"
 of Certificate Authority (CA) public keys (CA certs). If the default
 bundle file isn't adequate, you can specify an alternate file
 using the --cacert option.
If this HTTPS server uses a certificate signed by a CA represented in
 the bundle, the certificate verification probably failed due to a
 problem with the certificate (it might be expired, or the name might
 not match the domain name in the URL).
If you'd like to turn off curl's verification of the certificate, use
 the -k (or --insecure) option.
and no i don't want to download the files without cert verification!

https://support.comodo.com/index.php?/D ... ew/250/17/
https://www.digicert.com/ssl-certificat ... -nginx.htm

should be the #2 key on this page: https://support.comodo.com/index.php?/D ... tion-sha-2

Code: Select all

$ curl -fsSL --cacert /tmp/com "https://www.factorio.com/get-download/0.12.33/headless/linux64"
works without a problem (/tmp/com is the #2 key from the linked page)

Re: [Website] Broken SSL-Cert

Posted: Fri May 27, 2016 6:16 pm
by chpio
so im forced to add the intermediate key to my docker container, what is kinda sucky :(
also i don't think this bug will ever be fixed (to many bug reports about this issue; sorry for posting another one, i had searched for "ssl" without luck. "cert" gave me quite a few results)

Re: [Website] Broken SSL-Cert

Posted: Fri May 27, 2016 6:23 pm
by HanziQ
Could you maybe wait more than 26 minutes for the fix for this problem? Of course it will be fixed. Eventually.

Re: [Website] Broken SSL-Cert

Posted: Fri May 27, 2016 7:17 pm
by chpio
HanziQ wrote:Could you maybe wait more than 26 minutes for the fix for this problem? Of course it will be fixed. Eventually.
im not saying it should be fixed in 26mins, but a few months should be enough?

viewtopic.php?f=137&t=19346&p=123778&hilit=cert
viewtopic.php?f=133&t=20597&p=129411&hilit=cert#p129411
maybe related & fixed (?!): viewtopic.php?f=23&t=926&p=6437&hilit=cert#p6437

also it's not a real problem for me any more, as i already fixed it.

Re: [Website] Broken SSL-Cert

Posted: Mon May 30, 2016 11:30 am
by HanziQ
Fixed.

Re: [Website] Broken SSL-Cert

Posted: Thu Jun 02, 2016 4:37 pm
by chpio
HanziQ wrote:Fixed.
thank you