On Wed, 21 Jan 2009 11:51:10 -0800 coderman <[email protected]> wrote: >On Wed, Jan 21, 2009 at 1:43 AM, Scott Bennett <[email protected]> wrote: >>... >> Okay. I downloaded entrust_ssl_ca.der (the man page for wget(1) says >> it wants DER or PEM format for certificates) and > >i tend to use PEM; DER won't work with many wget installations. > >wget --ca-certificate=entrust_ssl_ca.cer https://www.torproject.org/dist/... > >should work fine. > Still no joy. Here's an example specifying the certicates directory, but not specifying it fails identically:
Script started on Fri Jan 23 02:45:18 2009 [hellas] 101 % wget --ca-directory=/usr/local/openssl/certs --ca-certificate=entrust_ssl_ca.cer https://www.torproject.org/dist/tor-0.2.1.11-alpha.tar.gz.asc https://www.torproject.org/dist/tor-0.2.1.11-alpha.tar.gz.sha1 https://www.torproject.org/dist/tor-0.2.1.11-alpha.tar.gz --02:47:10-- https://www.torproject.org/dist/tor-0.2.1.11-alpha.tar.gz.asc => `tor-0.2.1.11-alpha.tar.gz.asc' Resolving www.torproject.org... 86.59.21.36 Connecting to www.torproject.org|86.59.21.36|:443... connected. ERROR: Certificate verification error for www.torproject.org: unable to get local issuer certificate To connect to www.torproject.org insecurely, use `--no-check-certificate'. Unable to establish SSL connection. --02:47:11-- https://www.torproject.org/dist/tor-0.2.1.11-alpha.tar.gz.sha1 => `tor-0.2.1.11-alpha.tar.gz.sha1' Connecting to www.torproject.org|86.59.21.36|:443... connected. ERROR: Certificate verification error for www.torproject.org: unable to get local issuer certificate To connect to www.torproject.org insecurely, use `--no-check-certificate'. Unable to establish SSL connection. --02:47:11-- https://www.torproject.org/dist/tor-0.2.1.11-alpha.tar.gz => `tor-0.2.1.11-alpha.tar.gz' Connecting to www.torproject.org|86.59.21.36|:443... connected. ERROR: Certificate verification error for www.torproject.org: unable to get local issuer certificate To connect to www.torproject.org insecurely, use `--no-check-certificate'. Unable to establish SSL connection. FINISHED --02:47:12-- Downloaded: 0 bytes in 0 files [hellas] 102 % exit exit Script done on Fri Jan 23 02:47:16 2009 Scott Bennett, Comm. ASMELG, CFIAG ********************************************************************** * Internet: bennett at cs.niu.edu * *--------------------------------------------------------------------* * "A well regulated and disciplined militia, is at all times a good * * objection to the introduction of that bane of all free governments * * -- a standing army." * * -- Gov. John Hancock, New York Journal, 28 January 1790 * **********************************************************************
