Skip to main content

wget and curl behind corporate proxy throws certificate is not trusted or certificate doesn't have a known issuer

If you try to run wget or curl in Ununtu/Debian behind corporate proxy, you might receive errors like: 
ERROR: The certificate of 'apertium.projectjj.com' is not trusted.
ERROR: The certificate of 'apertium.projectjj.com' doesn't have a known issuer.

wget https://apertium.projectjj.com/apt/apertium-packaging.public.gpg
ERROR: cannot verify apertium.projectjj.com's certificate, issued by 'emailAddress=proxyteam@corporate.proxy.com,CN=diassl.corporate.proxy.com,OU=Division UK,O=Group name,L=Company,ST=GB,C=UK':
  Unable to locally verify the issuer's authority.
To connect to apertium.projectjj.com insecurely, use `--no-check-certificate'.
To solution is to install your company's CA certificate in Ubuntu.
  1. In Windows, open the first part of URL in your web browser. e.g. open https://apertium.projectjj.com in web browser.
  2. If you inspect the certifcate, you will see the same CN (diassl.corporate.proxy.com), as reported by the error above
  3. Run certmgr.msc in Windows Run dialog.
  4. Open Trusted Root Certification Authorities > Certificates
  5. Find the certificate with name / issued by values ame as CN above.
  6. Right click it > All Tasks > Export as Base64 encoded X.509 (cer). Note: .crt and .cer are same thing as long as you export as base64. Its a Windows thing its nothing to do with the file.
  7. Rename the file's extension to .crt (Any other extension won't be accepted by Ubuntu).
  8. Copy the certificate.crt to Ubuntu box and install it: 
       mkdir /usr/local/share/ca-certificates/company
   cp certificate.crt /usr/local/share/ca-certificates/company/
   chmod -R 755 /usr/local/share/ca-certificates/company
   sudo update-ca-certificates
Labels:
Location: London, UK

Comments

Post a Comment

Popular posts from this blog

Kafka performance tuning

Performance Tuning of Kafka is critical when your cluster grow in size. Below are few points to consider to improve Kafka performance: Consumer group ID : Never use same exact consumer group ID for dozens of machines consuming from different topics. All of those commits will end up on the same exact partition of __consumer_offsets , hence the same broker, and this might in turn cause performance problems. Choose the consumer group ID to group_id+topic_name . Skewed : A broker is skewed if its number of partitions is greater that the average of partitions per broker on the given topic. Example: 2 brokers share 4 partitions, if one of them has 3 partitions, it is skewed (3 > 2). Try to make sure that none of the brokers is skewed. Spread : Brokers spread is the percentage of brokers in the cluster that has partitions for the given topic. Example: 3 brokers share a topic that has 2 partitions, so 66% of the brokers have partitions for this topic. Try to achieve 100% broker spread...
1 comment
Read more

Procedure for name and date of birth change (Pune)

For change of name, the form (scribd) is available free of cost at Government Book Depot (Shaskiya Granthagar), which is located near Collector’s office, next to Saint Helena's School. The postal address is: Government Photozinco Press Premises and Book Depot, 5, Photozinco Press Road, Pune, MH, 411001. Wikimapia link Charges for name or date of birth change, in the Maharashtra Government Gazette: INR 120.00 per insertion (for two copies of the Gazette) For backward class applicants: INR 60.00 Charges for extra copy of the Gazette: INR 15.00 per copy (two copies are enough, so you may not want to pay extra for extra copies). Backward class applicants are required to submit a xerox of caste certificate of old name as issued by the Collector of the District concerned. Once the form is duly submitted, it normally takes 10 to 15 days for publication of advertisement in the Maharashtra Government Gazette. The Gazette copy reaches to the address filled in the form within nex...
12 comments
Read more