On 16 Nov 2016, at 13:33, Tiraen wrote:
Good day, the question of such a plan
With regard to this document
https://pkgsrc.joyent.com/install-on-illumos/
His somebody checked on a newly installed server?
for example:
[root@mysqlstat /]#
BOOTSTRAP_TAR="bootstrap-2016Q3-tools-20161020.tar.gz"
[root@mysqlstat /]#
BOOTSTRAP_SHA="7564104003ff9039c83de07d4f29a6a659cb8f30"
[root@mysqlstat /]# curl -O
https://pkgsrc.joyent.com/packages/SmartOS/bootstrap/${BOOTSTRAP_TAR}
% Total % Received % Xferd Average Speed Time Time Time
Current
Dload Upload Total Spent Left
Speed
0 0 0 0 0 0 0 0 --:--:-- --:--:--
--:--:--
0curl: (60) SSL certificate problem: unable to get local issuer
certificate
More details here: http://curl.haxx.se/docs/sslcerts.html
curl performs SSL certificate verification by default, using a
"bundle"
of Certificate Authority (CA) public keys (CA certs). If the default
bundle file isn't adequate, you can specify an alternate file
using the --cacert option.
If this HTTPS server uses a certificate signed by a CA represented in
the bundle, the certificate verification probably failed due to a
problem with the certificate (it might be expired, or the name might
not match the domain name in the URL).
If you'd like to turn off curl's verification of the certificate, use
the -k (or --insecure) option.
[root@mysqlstat /]# curl -O
http://pkgsrc.joyent.com/packages/SmartOS/bootstrap/${BOOTSTRAP_TAR}
% Total % Received % Xferd Average Speed Time Time Time
Current
Dload Upload Total Spent Left
Speed
20 61.6M 20 12.4M 0 0 9341k 0 0:00:06 0:00:01
0:00:05
11.0Mcurl: (23) Failed writing body (0 != 1448)
The problem here is that no certificates are installed in the Global
Zone.[1]
Options available:
- use 'curl -k' to download without a certificate check. In this case,
do check the downloaded file against the published md5 checksums.[2]
- perform the download inside a native SmartOS zone. As far as I can
tell,
all the base-64 and min-64 images come with certificates pre-installed.
[1] Does anyone know how to install certificates in the GZ (without
installing
pkgsrc first)?
[2] Has anyone considered supplying sha256 checksums in preference, or
in
addition to md5 checksums?
-------------------------------------------
smartos-discuss
Archives: https://www.listbox.com/member/archive/184463/=now
RSS Feed: https://www.listbox.com/member/archive/rss/184463/25769125-55cfbc00
Modify Your Subscription:
https://www.listbox.com/member/?member_id=25769125&id_secret=25769125-7688e9fb
Powered by Listbox: http://www.listbox.com
