OK. I stand corrected (see the discussion on serverfault). This is neo4j's issue. Please fix.
On 09/17/2015 08:58 AM, Alan Robertson wrote: > I got the answer on serverfault at the link below. > It looks like godaddy isn't doing their job of hosting certificates > correctly. > > Here's a workaround from serverfault: > wget -q https://certs.godaddy.com/repository/gdig2.crt > wget -q --ca-certificate gdig2.crt -O - > https://debian.neo4j.org/neotechnology.gpg.key | apt-key add - > > *Could someone harangue godaddy and get them to fix this?* > > But now I know that this is really *your* gpg key for sure. > > > On 09/16/2015 09:56 AM, Alan Robertson wrote: >> >> I also asked this question on serverfault: >> http://serverfault.com/questions/722770/which-ubuntu-package-has-the-ca-for-debian-neo4j-org-godaddy >> >> The neo4j site shows that I should get the neo4j GPG signing key >> using |wget -q -O - http://debian.neo4j.org/neotechnology.gpg.key| >> >> This of course, could allow the certificate to be hacked, and I would >> not be able to tell. Bad news. So, I really should >> use*https*://debian.neo4j.org/neotechnology.gpg.key instead. But when >> I do, neither wget nor curl can find the certificate. On the other >> hand, Chrome seems perfectly happy with it. Here's the detailed >> message from wget: >> >> ERROR: cannot verify debian.neo4j.org's certificate, issued by >> ‘CN=Go Daddy Secure Certificate Authority - >> G2,OU=http://certs.godaddy.com/repository/,O=GoDaddy.com\, >> Inc.,L=Scottsdale,ST=Arizona,C=US’: >> >> I have to use a command line tool in this context, and it really >> needs to be gotten via https or it doesn't do what it's intended to >> do... Which debian/Ubuntu package will install the needed certificate >> authority? >> >> [I already know about *--no-check-certificate*. That doesn't solve >> the problem] >> >> -- >> >> Alan Robertson / CTO >> [email protected] <mailto:[email protected]>/ >> +1 303.947.7999 >> >> Assimilation Systems Limited >> http://AssimilationSystems.com >> >> Twitter <https://twitter.com/ossalanr> Linkedin >> <https://www.linkedin.com/in/alanr> skype >> <https://htmlsig.com/skype?username=alanr_unix.sh> >> >> -- >> You received this message because you are subscribed to the Google >> Groups "Neo4j" group. >> To unsubscribe from this group and stop receiving emails from it, >> send an email to [email protected] >> <mailto:[email protected]>. >> For more options, visit https://groups.google.com/d/optout. > > > -- > > Alan Robertson / CTO > [email protected] <mailto:[email protected]>/ > +1 303.947.7999 > > Assimilation Systems Limited > http://AssimilationSystems.com > > Twitter <https://twitter.com/ossalanr> Linkedin > <https://www.linkedin.com/in/alanr> skype > <https://htmlsig.com/skype?username=alanr_unix.sh> > > -- > You received this message because you are subscribed to the Google > Groups "Neo4j" group. > To unsubscribe from this group and stop receiving emails from it, send > an email to [email protected] > <mailto:[email protected]>. > For more options, visit https://groups.google.com/d/optout. -- Alan Robertson / CTO [email protected] <mailto:[email protected]>/ +1 303.947.7999 Assimilation Systems Limited http://AssimilationSystems.com Twitter <https://twitter.com/ossalanr> Linkedin <https://www.linkedin.com/in/alanr> skype <https://htmlsig.com/skype?username=alanr_unix.sh> -- You received this message because you are subscribed to the Google Groups "Neo4j" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
