On June 7, 2018 3:52:04 PM EDT, Stephen Chrzanowski <pontia...@gmail.com> wrote:
>Probably, yes.  Its running Debian Lenny.  I'm trying to locate a
>resource
>right now to see if I can get the appropriate files, and how to keep
>them
>updated.
>
>On Thu, Jun 7, 2018 at 3:43 PM, Simon Slavin <slav...@bigfraud.org>
>wrote:
>
>> On 7 Jun 2018, at 8:35pm, Stephen Chrzanowski <pontia...@gmail.com>
>wrote:
>>
>> > stephen@vmLamp:~$ wget -O - https://sqlite.org/download.html
>> > --15:30:59--  https://sqlite.org/download.html
>> >           => `-'
>> > Resolving sqlite.org... 45.33.6.223
>> > Connecting to sqlite.org|45.33.6.223|:443... connected.
>> > ERROR: Certificate verification error for sqlite.org: unable to get
>> local
>> > issuer certificate
>> > To connect to sqlite.org insecurely, use `--no-check-certificate'.
>> > Unable to establish SSL connection.
>> >
>> > In my browser, however, the cert does show up as green
>>
>> Your copy of wget is using a different set of Certification Authority
>> certificates to those used by your browser.  Since your browser was
>updated
>> more recently than your OS (purely a guess on my part) I'm guessing
>that
>> the certificates used by "wget" are slightly out of date.
>>
>> Simon.
>> _______________________________________________
>> sqlite-users mailing list
>> sqlite-users@mailinglists.sqlite.org
>> http://mailinglists.sqlite.org/cgi-bin/mailman/listinfo/sqlite-users
>>
>_______________________________________________
>sqlite-users mailing list
>sqlite-users@mailinglists.sqlite.org
>http://mailinglists.sqlite.org/cgi-bin/mailman/listinfo/sqlite-users

For what it's worth, it looks like Jessie's ca-certificates package includes 
the ISRG's root CA certificate needed to validate Let's Encrypt certs. 
Presumably with the appropriate level of access you could install it manually. 
-- 
J. King
_______________________________________________
sqlite-users mailing list
sqlite-users@mailinglists.sqlite.org
http://mailinglists.sqlite.org/cgi-bin/mailman/listinfo/sqlite-users

Reply via email to