[ale] getting Untrusted connection on one system but not the other?

[Lightner, Jeff]

If you run "curl-config --ca" it will show you which certificate bundle you're using.    (curl-config is part of the curl-devel package so you need to yum install that if not already installed.)

The openssl package provides the certificate bundle (at least on RHEL5) so you may be able to get a more recent bundle by running "yum update openssl".  I had to do this last year because DigiCert wasn't on one of my servers' 2011 dated bundle but was in the May 2012 dated bundle on another one.

If you have an unsupported version you can simply find the certificate on the working machine and put it in the bundle on the non-working machine yourself.  I had to do that to get that DigiCert certificate working on a legacy HP-UX system for which there were no updates available.





-----Original Message-----
From: ale-bounces at ale.org [mailto:ale-bounces at ale.org] On Behalf Of Brian MacLeod
Sent: Wednesday, August 07, 2013 9:38 AM
To: ale at ale.org
Subject: Re: [ale] getting Untrusted connection on one system but not the other?

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Do not forget that in RHEL/CentOS 6 that you also should have package ca-certificates installed/updated. It may be a contributing factor here.

More and more of this family of distributions is pointing at /etc/pki/tls/certs

to handle certificate processing.  I was recently reminded of this when i was trying to help a coworker get Citrix Receiver installed, and that software comes effectively with NO certificates.  Linking in the certs from /etc/pki/tls/certs fixed that, and guarantees to follow updates by the distro.

Brian


-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.18 (Darwin)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iQE4BAEBCAAiBQJSAk2jGxhoa3A6Ly9rZXlzZXJ2ZXIudWJ1bnR1LmNvbQAKCRD5
XCJY/q4Y6M4YCACNnn1zxMr/ww8mdhdMRYk43c417pdqywhosk20t7mHrqFl0WDR
nsBp6eLmO1AbJ84qjOg/iFpMX9GgAC9T/FBUhPIpZTjOa2obcSFeGIAEKgAYdgim
WLCZUR0ABdNVScIge/7Rpu96C4XT3MubjKEBngJB86RA0aibkyAZXLliCxaaVrad
LYoODcEmLEs6MH5OpoKj+DhmFyYaO0uJUbmu9dC5L3HOYbZA8DUG1fF5b0vRTGIS
OFZvflyyAfVuYEFSB4MebPI93E/i2E/j+4Wi3D3cvJirn7/C53/iriq4EWfnpRMm
u9f25ABvE2tihcpsjN+NDn3p8QJdYhEdGDjx
=XaBr
-----END PGP SIGNATURE-----
_______________________________________________
Ale mailing list
Ale at ale.org
http://mail.ale.org/mailman/listinfo/ale
See JOBS, ANNOUNCE and SCHOOLS lists at
http://mail.ale.org/mailman/listinfo




Athena(r), Created for the Cause(tm)
Making a Difference in the Fight Against Breast Cancer

---------------------------------
CONFIDENTIALITY NOTICE: This e-mail may contain privileged or confidential information and is for the sole use of the intended recipient(s). If you are not the intended recipient, any disclosure, copying, distribution, or use of the contents of this information is prohibited and may be unlawful. If you have received this electronic transmission in error, please reply immediately to the sender that you have received the message in error, and delete it. Thank you.
----------------------------------