czwartek, 8 maja 2014

Https dropbox problem

Niektórych z Was dotknął problem pobierania kerneli przy włączonym HTTPS. Dziś i ja miałem z tym kłopot co zmotywowało mnie do jego rozwiązania.

Konsola wypluwała mi mniej więcej taką informację:
BŁĄD: błąd kontroli certyfikatu dla dl.dropbox.com, wystawionego przez `/C=US/ST=Arizona/L=Scottsdale/O=GoDaddy.com, Inc./OU=http://certs.godaddy.com/repository//CN=Go Daddy Secure Certificate Authority - G2':
  Błąd lokalnej kontroli centrum certyfikacji.
Aby połączyć się z dl.dropbox.com w sposób niebezpieczny, można użyć `--no-check-certificate'.
Problem jak się go "wygoogluje" jest znany, niby już kiedyś rozwiązany, ale wraca jak bumerang.
Moja propozycja to następujące polecenia:
sudo cp /usr/share/ca-certificates/* /usr/local/share/ca-certificates/ -r
sudo update-ca-certificates
co spowoduje odświeżenie certyfikatów - w terminalu zobaczymy coś na kształt:
root@yoga:/usr/local/share/ca-certificates# sudo update-ca-certificates                                          
Updating certificates in /etc/ssl/certs... 164 added, 0 removed; done.
Running hooks in /etc/ca-certificates/update.d....
Replacing debian:spi-cacert-2008.pem
Replacing debian:VeriSign_Class_3_Public_Primary_Certification_Authority_-_G5.pem
Replacing debian:Buypass_Class_2_Root_CA.pem
Replacing debian:Verisign_Class_1_Public_Primary_Certification_Authority_-_G2.pem
Replacing debian:AddTrust_Qualified_Certificates_Root.pem
Replacing debian:Camerfirma_Chambers_of_Commerce_Root.pem
Replacing debian:Verisign_Class_3_Public_Primary_Certification_Authority.pem
Replacing debian:Buypass_Class_2_CA_1.pem
Replacing debian:GeoTrust_Universal_CA_2.pem
Replacing debian:Root_CA_Generalitat_Valenciana.pem
Replacing debian:Equifax_Secure_CA.pem
Replacing debian:GlobalSign_Root_CA.pem
Replacing debian:Microsec_e-Szigno_Root_CA.pem
Replacing debian:QuoVadis_Root_CA_3.pem
Replacing debian:Staat_der_Nederlanden_Root_CA_-_G2.pem
Replacing debian:UTN_USERFirst_Email_Root_CA.pem
Replacing debian:TC_TrustCenter_Universal_CA_I.pem
Replacing debian:Trustis_FPS_Root_CA.pem
Replacing debian:Wells_Fargo_Root_CA.pem
Replacing debian:America_Online_Root_Certification_Authority_2.pem
Replacing debian:VeriSign_Class_3_Public_Primary_Certification_Authority_-_G4.pem
Replacing debian:TURKTRUST_Certificate_Services_Provider_Root_2.pem
Replacing debian:SecureSign_RootCA11.pem
Replacing debian:ApplicationCA_-_Japanese_Government.pem
Replacing debian:ComSign_CA.pem
Replacing debian:VeriSign_Universal_Root_Certification_Authority.pem
Replacing debian:EBG_Elektronik_Sertifika_Hizmet_Sağlayıcısı.pem
Replacing debian:Izenpe.com.pem
Replacing debian:Go_Daddy_Root_Certificate_Authority_-_G2.pem
Replacing debian:ValiCert_Class_1_VA.pem
Replacing debian:AddTrust_Low-Value_Services_Root.pem
Replacing debian:Verisign_Class_3_Public_Primary_Certification_Authority_2.pem
Replacing debian:PSCProcert.pem
Replacing debian:UTN_DATACorp_SGC_Root_CA.pem
Replacing debian:TURKTRUST_Certificate_Services_Provider_Root_1.pem
Replacing debian:DST_ACES_CA_X6.pem
Replacing debian:Starfield_Services_Root_Certificate_Authority_-_G2.pem
Replacing debian:Hongkong_Post_Root_CA_1.pem
Replacing debian:NetLock_Notary_=Class_A=_Root.pem
Replacing debian:AddTrust_External_Root.pem
Replacing debian:Verisign_Class_2_Public_Primary_Certification_Authority_-_G2.pem
Replacing debian:COMODO_ECC_Certification_Authority.pem
Replacing debian:Network_Solutions_Certificate_Authority.pem
Replacing debian:E-Guven_Kok_Elektronik_Sertifika_Hizmet_Saglayicisi.pem
Replacing debian:thawte_Primary_Root_CA_-_G2.pem
Replacing debian:DigiCert_Assured_ID_Root_CA.pem
Replacing debian:Comodo_AAA_Services_root.pem
Replacing debian:Camerfirma_Global_Chambersign_Root.pem
Replacing debian:Firmaprofesional_Root_CA.pem
Replacing debian:SwissSign_Silver_CA_-_G2.pem
Replacing debian:AffirmTrust_Networking.pem
Replacing debian:DigiCert_Global_Root_CA.pem
Replacing debian:TURKTRUST_Certificate_Services_Provider_Root_2007.pem
Replacing debian:DST_Root_CA_X3.pem
Replacing debian:AC_Raíz_Certicámara_S.A..pem
Replacing debian:CNNIC_ROOT.pem
Replacing debian:Juur-SK.pem
Replacing debian:Certum_Trusted_Network_CA.pem
Replacing debian:StartCom_Certification_Authority_G2.pem
Replacing debian:Global_Chambersign_Root_-_2008.pem
Replacing debian:QuoVadis_Root_CA.pem
Replacing debian:Verisign_Class_3_Public_Primary_Certification_Authority_-_G3.pem
Replacing debian:certSIGN_ROOT_CA.pem
Replacing debian:TC_TrustCenter_Class_3_CA_II.pem
Replacing debian:TC_TrustCenter_Class_2_CA_II.pem
Replacing debian:StartCom_Certification_Authority.pem
Replacing debian:SecureTrust_CA.pem
Replacing debian:QuoVadis_Root_CA_2.pem
Replacing debian:GTE_CyberTrust_Global_Root.pem
Replacing debian:ePKI_Root_Certification_Authority.pem
Replacing debian:TÜBİTAK_UEKAE_Kök_Sertifika_Hizmet_Sağlayıcısı_-_Sürüm_3.pem
Replacing debian:ComSign_Secured_CA.pem
Replacing debian:Buypass_Class_3_Root_CA.pem
Replacing debian:Sonera_Class_1_Root_CA.pem
Replacing debian:GeoTrust_Global_CA_2.pem
Replacing debian:Certinomis_-_Autorité_Racine.pem
Replacing debian:Hellenic_Academic_and_Research_Institutions_RootCA_2011.pem
Replacing debian:GlobalSign_Root_CA_-_R3.pem
Replacing debian:CA_Disig.pem
Replacing debian:Deutsche_Telekom_Root_CA_2.pem
Replacing debian:NetLock_Business_=Class_B=_Root.pem
Replacing debian:Security_Communication_RootCA2.pem
Replacing debian:IGC_A.pem
Replacing debian:Verisign_Class_1_Public_Primary_Certification_Authority_-_G3.pem
Replacing debian:RSA_Security_2048_v3.pem
Replacing debian:Certigna.pem
Replacing debian:OISTE_WISeKey_Global_Root_GA_CA.pem
Replacing debian:NetLock_Arany_=Class_Gold=_Főtanúsítvány.pem
Replacing debian:Autoridad_de_Certificacion_Firmaprofesional_CIF_A62634068.pem
Replacing debian:Verisign_Class_2_Public_Primary_Certification_Authority_-_G3.pem
Replacing debian:Entrust.net_Secure_Server_CA.pem
Replacing debian:Certum_Root_CA.pem
Replacing debian:Go_Daddy_Class_2_CA.pem
Replacing debian:CA_Disig_Root_R1.pem
Replacing debian:D-TRUST_Root_Class_3_CA_2_EV_2009.pem
Replacing debian:Buypass_Class_3_CA_1.pem
Replacing debian:Comodo_Secure_Services_root.pem
Replacing debian:Swisscom_Root_EV_CA_2.pem
Replacing debian:GlobalSign_Root_CA_-_R2.pem
Replacing debian:Visa_eCommerce_Root.pem
Replacing debian:CA_Disig_Root_R2.pem
Replacing debian:SwissSign_Platinum_CA_-_G2.pem
Replacing debian:Starfield_Class_2_CA.pem
Replacing debian:XRamp_Global_CA_Root.pem
Replacing debian:Verisign_Class_3_Public_Primary_Certification_Authority_-_G2.pem
Replacing debian:StartCom_Certification_Authority_2.pem
Replacing debian:Taiwan_GRCA.pem
Replacing debian:NetLock_Qualified_=Class_QA=_Root.pem
Replacing debian:Equifax_Secure_Global_eBusiness_CA.pem
Replacing debian:GeoTrust_Primary_Certification_Authority.pem
Replacing debian:Microsec_e-Szigno_Root_CA_2009.pem
Replacing debian:Comodo_Trusted_Services_root.pem
Replacing debian:Thawte_Server_CA.pem
Replacing debian:T-TeleSec_GlobalRoot_Class_3.pem
Replacing debian:DigiCert_High_Assurance_EV_Root_CA.pem
Replacing debian:thawte_Primary_Root_CA_-_G3.pem
Replacing debian:Entrust_Root_Certification_Authority.pem
Replacing debian:TDC_OCES_Root_CA.pem
Replacing debian:Swisscom_Root_CA_2.pem
Replacing debian:ACEDICOM_Root.pem
Replacing debian:SwissSign_Gold_CA_-_G2.pem
Replacing debian:S-TRUST_Authentication_and_Encryption_Root_CA_2005_PN.pem
Replacing debian:Secure_Global_CA.pem
Replacing debian:Entrust.net_Premium_2048_Secure_Server_CA.pem
Replacing debian:EC-ACC.pem
Replacing debian:ValiCert_Class_2_VA.pem
Replacing debian:Cybertrust_Global_Root.pem
Replacing debian:Swisscom_Root_CA_1.pem
Replacing debian:GeoTrust_Primary_Certification_Authority_-_G2.pem
Replacing debian:GeoTrust_Global_CA.pem
Replacing debian:Starfield_Root_Certificate_Authority_-_G2.pem
Replacing debian:AffirmTrust_Commercial.pem
Replacing debian:thawte_Primary_Root_CA.pem
Replacing debian:Thawte_Premium_Server_CA.pem
Replacing debian:TWCA_Root_Certification_Authority.pem
Replacing debian:China_Internet_Network_Information_Center_EV_Certificates_Root.pem
Replacing debian:Security_Communication_EV_RootCA1.pem
Replacing debian:EE_Certification_Centre_Root_CA.pem
Replacing debian:GeoTrust_Primary_Certification_Authority_-_G3.pem
Replacing debian:UTN_USERFirst_Hardware_Root_CA.pem
Replacing debian:AddTrust_Public_Services_Root.pem
Replacing debian:COMODO_Certification_Authority.pem
Replacing debian:A-Trust-nQual-03.pem
Replacing debian:Digital_Signature_Trust_Co._Global_CA_3.pem
Replacing debian:TDC_Internet_Root_CA.pem
Replacing debian:Security_Communication_Root_CA.pem
Replacing debian:AffirmTrust_Premium.pem
Replacing debian:WellsSecure_Public_Root_Certificate_Authority.pem
Replacing debian:Baltimore_CyberTrust_Root.pem
Replacing debian:America_Online_Root_Certification_Authority_1.pem
Replacing debian:Staat_der_Nederlanden_Root_CA.pem
Replacing debian:D-TRUST_Root_Class_3_CA_2_2009.pem
Replacing debian:Sonera_Class_2_Root_CA.pem
Replacing debian:Equifax_Secure_eBusiness_CA_1.pem
Replacing debian:AffirmTrust_Premium_ECC.pem
Replacing debian:RSA_Root_Certificate_1.pem
Replacing debian:Chambers_of_Commerce_Root_-_2008.pem
Replacing debian:Actalis_Authentication_Root_CA.pem
Replacing debian:Verisign_Class_1_Public_Primary_Certification_Authority.pem
Replacing debian:Verisign_Class_4_Public_Primary_Certification_Authority_-_G3.pem
Replacing debian:GeoTrust_Universal_CA.pem
Replacing debian:Digital_Signature_Trust_Co._Global_CA_1.pem
Replacing debian:Certplus_Class_2_Primary_CA.pem
Replacing debian:NetLock_Express_=Class_C=_Root.pem
done.
done.
Po tej operacji wget z włączonym HTTPS znów zaczął u mnie działać :)