Wget: ERROR cannot verify www.important_website certificate

certificateerrorSecurity

I am installing a large amount of files with wget and all of a sudden I get the error message: cannot verify www.ncei.noaa.gov's certificate, issued by ‘CN=DigiCert SHA2 Secure Server CA,O=DigiCert Inc,C=US’.

Why did wget all of a sudden stop working?

Best Answer

It's not linked to wget but to your SSL certificates trust store (these are used to ensure encryption between client (you) and server via TLS). Either your store was damaged in some way, or the certificate in question is not valid anymore, and you receive this error as the connection can't be guaranteed. From testing, their certificate is still valid, so there are likely some issues with your ssl store.

You can also add this option --no-check-certificate to ignore such errors, which would solve your problems. However, do it at your own risk, as those certificates are there for a reason.

Related Solutions

MacOS – Safari not warning on SSL certificate hostname mismatch

So, as noted in the update, Safari does actually warn you -- once.

If you decide to proceed anyway, then for the remainder of that browser session, you need to remember that you're talking to a potentially compromised server, because you will see no evidence of that except by examining the certificate (by clicking on the https/padlock icon).

However, exiting Safari and restarting it restores the warning. A visit to the compromised site in the new instance of the browser once again presents the warning.

MacOS – Mavericks Server: Unable to use 3rd party SSL Certificates with Open Directory

I believe Apple fixed that bug in Server 4 but I can't reproduce it on Server 5. Have you checked the serveradmin command line tool to check your settings and status:

sudo serveradmin fullstatus dirserv
sudo serveradmin settings dirserv
sudo serveradmin -x settings certs

The -x argument instructs serveradmin to format the data as XML, which often shows more information (at least in the case of certs).

Sometimes you can set things there that the GUI balks at - but you also want to have the ability to call AppleCare for support or a great backup plan that's tested before mucking with sudo and serveradmin from my experience.

Best Answer

Related Solutions

MacOS – Safari not warning on SSL certificate hostname mismatch

MacOS – Mavericks Server: Unable to use 3rd party SSL Certificates with Open Directory

Related Question