<div dir="ltr"><div>do the ca-certificates remove/reinstall dance<br><br></div>rpm -qa | grep ca-cert | xargs yum -y reinstall<br></div><div class="gmail_extra"><br><br><div class="gmail_quote">On Wed, Aug 7, 2013 at 11:03 AM, Scott Castaline <span dir="ltr"><<a href="mailto:skotchman@gmail.com" target="_blank">skotchman@gmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">can't find the curl-devel package on fedora repo. The only thing that<br>
comnes up is libcurl.<br>
<div class="im HOEnZb">On 08/07/2013 10:03 AM, Lightner, Jeff wrote:<br>
> If you run "curl-config --ca" it will show you which certificate bundle you're using. (curl-config is part of the curl-devel package so you need to yum install that if not already installed.)<br>
><br>
> The openssl package provides the certificate bundle (at least on RHEL5) so you may be able to get a more recent bundle by running "yum update openssl". I had to do this last year because DigiCert wasn't on one of my servers' 2011 dated bundle but was in the May 2012 dated bundle on another one.<br>
><br>
> If you have an unsupported version you can simply find the certificate on the working machine and put it in the bundle on the non-working machine yourself. I had to do that to get that DigiCert certificate working on a legacy HP-UX system for which there were no updates available.<br>
><br>
><br>
><br>
><br>
><br>
> -----Original Message-----<br>
> From: <a href="mailto:ale-bounces@ale.org">ale-bounces@ale.org</a> [mailto:<a href="mailto:ale-bounces@ale.org">ale-bounces@ale.org</a>] On Behalf Of Brian MacLeod<br>
> Sent: Wednesday, August 07, 2013 9:38 AM<br>
> To: <a href="mailto:ale@ale.org">ale@ale.org</a><br>
> Subject: Re: [ale] getting Untrusted connection on one system but not the other?<br>
><br>
</div><div class="im HOEnZb">> Do not forget that in RHEL/CentOS 6 that you also should have package ca-certificates installed/updated. It may be a contributing factor here.<br>
><br>
> More and more of this family of distributions is pointing at /etc/pki/tls/certs<br>
><br>
> to handle certificate processing. I was recently reminded of this when i was trying to help a coworker get Citrix Receiver installed, and that software comes effectively with NO certificates. Linking in the certs from /etc/pki/tls/certs fixed that, and guarantees to follow updates by the distro.<br>
><br>
> Brian<br>
><br>
><br>
</div><div class="im HOEnZb">> _______________________________________________<br>
> Ale mailing list<br>
> <a href="mailto:Ale@ale.org">Ale@ale.org</a><br>
> <a href="http://mail.ale.org/mailman/listinfo/ale" target="_blank">http://mail.ale.org/mailman/listinfo/ale</a><br>
> See JOBS, ANNOUNCE and SCHOOLS lists at<br>
> <a href="http://mail.ale.org/mailman/listinfo" target="_blank">http://mail.ale.org/mailman/listinfo</a><br>
><br>
><br>
><br>
><br>
> Athena(r), Created for the Cause(tm)<br>
> Making a Difference in the Fight Against Breast Cancer<br>
><br>
> ---------------------------------<br>
> CONFIDENTIALITY NOTICE: This e-mail may contain privileged or confidential information and is for the sole use of the intended recipient(s). If you are not the intended recipient, any disclosure, copying, distribution, or use of the contents of this information is prohibited and may be unlawful. If you have received this electronic transmission in error, please reply immediately to the sender that you have received the message in error, and delete it. Thank you.<br>
> ----------------------------------<br>
><br>
><br>
> _______________________________________________<br>
> Ale mailing list<br>
> <a href="mailto:Ale@ale.org">Ale@ale.org</a><br>
> <a href="http://mail.ale.org/mailman/listinfo/ale" target="_blank">http://mail.ale.org/mailman/listinfo/ale</a><br>
> See JOBS, ANNOUNCE and SCHOOLS lists at<br>
> <a href="http://mail.ale.org/mailman/listinfo" target="_blank">http://mail.ale.org/mailman/listinfo</a><br>
><br>
<br>
</div><div class="im HOEnZb">--<br>
Sent from my home PC running Fedora18 to you and NSA, FBI, CIA, HSA<br>
and God only knows who else!!!!!!!!!!!!!!!!<br>
</div><div class="HOEnZb"><div class="h5">_______________________________________________<br>
Ale mailing list<br>
<a href="mailto:Ale@ale.org">Ale@ale.org</a><br>
<a href="http://mail.ale.org/mailman/listinfo/ale" target="_blank">http://mail.ale.org/mailman/listinfo/ale</a><br>
See JOBS, ANNOUNCE and SCHOOLS lists at<br>
<a href="http://mail.ale.org/mailman/listinfo" target="_blank">http://mail.ale.org/mailman/listinfo</a><br>
</div></div></blockquote></div><br><br clear="all"><br>-- <br><div dir="ltr">-- <br>James P. Kinney III<br><i><i><i><i><br></i></i></i></i>Every time you stop a school, you will have to build a jail. What you
gain at one end you lose at the other. It's like feeding a dog on his
own tail. It won't fatten the dog.<br>
- Speech 11/23/1900 Mark Twain<br><i><i><i><i><br><a href="http://heretothereideas.blogspot.com/" target="_blank">http://heretothereideas.blogspot.com/</a><br></i></i></i></i></div>
</div>