karlentwistle

ruby doctor.rb
/usr/bin/ruby1.8 (1.8.6)
OpenSSL 0.9.8g 19 Oct 2007: /usr/lib/ssl
SSL_CERT_DIR=""
SSL_CERT_FILE=""

HEAD https://status.github.com:443
OpenSSL::SSL::SSLError: certificate verify failed

The server presented a certificate that could not be verified:

karlentwistle

sudo apt-get update && sudo apt-get install

karlentwistle

curl https://facebook.com
curl: (60) SSL certificate problem, verify that the CA cert is OK. Details:
error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed
More details here: http://curl.haxx.se/docs/sslcerts.html

karlentwistle

openssl s_client -connect graph.facebook.com:443 -showcerts
CONNECTED(00000003)
depth=1 /C=US/O=DigiCert Inc/OU=www.digicert.com/CN=DigiCert High Assurance CA-3
verify error:num=20:unable to get local issuer certificate
verify return:0
---
Certificate chain
 0 s:/C=US/ST=CA/L=Menlo Park/O=Facebook, Inc./CN=*.facebook.com
   i:/C=US/O=DigiCert Inc/OU=www.digicert.com/CN=DigiCert High Assurance CA-3

karlentwistle

cd ~/
mkdir digi
wget https://www.digicert.com/CACerts/DigiCertHighAssuranceEVRootCA.crt
wget https://www.digicert.com/CACerts/DigiCertSecureServerCA.crt
wget https://www.digicert.com/CACerts/DigiCertHighAssuranceCA-3.crt

karlentwistle

openssl x509 -inform DES -in DigiCertHighAssuranceEVRootCA.crt -out DigiCertHighAssuranceEVRootCA.crt -text
openssl x509 -inform DES -in DigiCertSecureServerCA.crt -out DigiCertSecureServerCA.crt -text
openssl x509 -inform DES -in DigiCertHighAssuranceCA-3.crt -out DigiCertHighAssuranceCA-3.crt -text

karlentwistle

mkdir /usr/share/ca-certificates/digicert/
mv *.crt /usr/share/ca-certificates/digicert/

karlentwistle

digicert/DigiCertHighAssuranceCA-3.crt
digicert/DigiCertSecureServerCA.crt
digicert/DigiCertHighAssuranceEVRootCA.crt

karlentwistle

cd /etc/ssl
sudo c_rehash

karlentwistle

blablabla

blablabla