I got the answer on serverfault at the link below.
It looks like godaddy isn't doing their job of hosting certificates
correctly.

Here's a workaround from serverfault:
    wget -q https://certs.godaddy.com/repository/gdig2.crt
    wget -q --ca-certificate gdig2.crt -O - 
https://debian.neo4j.org/neotechnology.gpg.key |  apt-key add -

*Could someone harangue godaddy and get them to fix this?*

But now I know that this is really *your* gpg key for sure.


On 09/16/2015 09:56 AM, Alan Robertson wrote:
>
> I also asked this question on serverfault:
> http://serverfault.com/questions/722770/which-ubuntu-package-has-the-ca-for-debian-neo4j-org-godaddy
>
> The neo4j site shows that I should get the neo4j GPG signing key
> using |wget -q -O - http://debian.neo4j.org/neotechnology.gpg.key|
>
> This of course, could allow the certificate to be hacked, and I would
> not be able to tell. Bad news. So, I really should
> use*https*://debian.neo4j.org/neotechnology.gpg.key instead. But when
> I do, neither wget nor curl can find the certificate. On the other
> hand, Chrome seems perfectly happy with it. Here's the detailed
> message from wget:
>
>     ERROR: cannot verify debian.neo4j.org's certificate, issued by
>     ‘CN=Go Daddy Secure Certificate Authority -
>     G2,OU=http://certs.godaddy.com/repository/,O=GoDaddy.com\,
>     Inc.,L=Scottsdale,ST=Arizona,C=US’:
>
> I have to use a command line tool in this context, and it really needs
> to be gotten via https or it doesn't do what it's intended to do...
> Which debian/Ubuntu package will install the needed certificate authority?
>
> [I already know about *--no-check-certificate*. That doesn't solve the
> problem]
>
> -- 
>
> Alan Robertson / CTO
> al...@assimilationsystems.com <mailto:al...@assimilationsystems.com>/
> +1 303.947.7999
>
> Assimilation Systems Limited
> http://AssimilationSystems.com
>
> Twitter <https://twitter.com/ossalanr> Linkedin
> <https://www.linkedin.com/in/alanr> skype
> <https://htmlsig.com/skype?username=alanr_unix.sh>
>
> -- 
> You received this message because you are subscribed to the Google
> Groups "Neo4j" group.
> To unsubscribe from this group and stop receiving emails from it, send
> an email to neo4j+unsubscr...@googlegroups.com
> <mailto:neo4j+unsubscr...@googlegroups.com>.
> For more options, visit https://groups.google.com/d/optout.


-- 

Alan Robertson / CTO
al...@assimilationsystems.com <mailto:al...@assimilationsystems.com>/ +1
303.947.7999

Assimilation Systems Limited
http://AssimilationSystems.com

Twitter <https://twitter.com/ossalanr> Linkedin
<https://www.linkedin.com/in/alanr> skype
<https://htmlsig.com/skype?username=alanr_unix.sh>

-- 
You received this message because you are subscribed to the Google Groups 
"Neo4j" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to neo4j+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to