[SOLVED] Jessie wget: certificate not trusted, was: Jessie iceweasel: This Connection is Untrusted

From	"Thomas Schmitt" <scdbackup@gmx.net>
Newsgroups	linux.debian.user
Subject	[SOLVED] Jessie wget: certificate not trusted, was: Jessie iceweasel: This Connection is Untrusted
Date	2021-10-04 12:00 +0200
Message-ID	<D4sVj-2Ys-1@gated-at.bofh.it> (permalink)
Organization	linux.* mail to news gateway

Show all headers | View raw

Hi,

mett wrote:
> the final solution is:
> -disable the certs with an ! before the cert name
> (vi /etc/ca-certificates.conf: !DST_Root_CA_X3.crt)
> -then, rebuild the cert directory (update-ca-certificates --fresh)

Indeed this brought success with wget on the Debian 8 machine.

  $ wget https://lists.debian.org
  ...
  2021-10-04 11:48:12 (7.34 MB/s) - ‘index.html’ saved [7533/7533]
  $

I copied
  /usr/share/ca-certificates
  /etc/ca-certificates.conf
  /etc/ssl/certs
from the Debian 10 machine (dist-upgraded last week) to the Debian 8.
But with or without a run of
  update-ca-certificates --fresh
wget did not work.
The proposal of mett finally got wget to download lists.debian.org with
certificate check enabled.

Now i am puzzled why this operation is not necessary on Debian 10 from
where the file /etc/ca-certificates.conf was copied.
The entry is in /etc/ca-certificates.conf,
DST_Root_CA_X3.crt exists in /usr/share/ca-certificates,
the link DST_Root_CA_X3.pem exists in /etc/ssl/certs.
Nevertheless wget works on my Debian 10 with https://lists.debian.org.

> -then, restart your servers.

I am not aware of any servers on the Debian 8 machine which would have to
do with certificates. I had not to restart anything after
  update-ca-certificates --fresh
wget worked immediately after.

Do SSL clients depend on a local service ?

Have a nice day :)

Thomas

Back to linux.debian.user | Previous | Next — Next in thread | Find similar | Unroll thread

Thread

[SOLVED] Jessie wget: certificate not trusted, was: Jessie iceweasel: This Connection is Untrusted "Thomas Schmitt" <scdbackup@gmx.net> - 2021-10-04 12:00 +0200
  Re: [SOLVED] Jessie wget: certificate not trusted, was: Jessie  iceweasel: This Connection is Untrusted mett <mett@pmars.jp> - 2021-10-05 16:40 +0200
    Re: [SOLVED] Jessie wget: certificate not trusted "Thomas Schmitt" <scdbackup@gmx.net> - 2021-10-05 18:00 +0200

csiph-web