[ale] getting Untrusted connection on one system but not the other?

[Jim Kinney]

do the ca-certificates remove/reinstall dance

rpm -qa | grep ca-cert | xargs yum -y reinstall


On Wed, Aug 7, 2013 at 11:03 AM, Scott Castaline <skotchman at gmail.com>wrote:

> can't find the curl-devel package on fedora repo. The only thing that
> comnes up is libcurl.
> On 08/07/2013 10:03 AM, Lightner, Jeff wrote:
> > If you run "curl-config --ca" it will show you which certificate bundle
> you're using.    (curl-config is part of the curl-devel package so you need
> to yum install that if not already installed.)
> >
> > The openssl package provides the certificate bundle (at least on RHEL5)
> so you may be able to get a more recent bundle by running "yum update
> openssl".  I had to do this last year because DigiCert wasn't on one of my
> servers' 2011 dated bundle but was in the May 2012 dated bundle on another
> one.
> >
> > If you have an unsupported version you can simply find the certificate
> on the working machine and put it in the bundle on the non-working machine
> yourself.  I had to do that to get that DigiCert certificate working on a
> legacy HP-UX system for which there were no updates available.
> >
> >
> >
> >
> >
> > -----Original Message-----
> > From: ale-bounces at ale.org [mailto:ale-bounces at ale.org] On Behalf Of
> Brian MacLeod
> > Sent: Wednesday, August 07, 2013 9:38 AM
> > To: ale at ale.org
> > Subject: Re: [ale] getting Untrusted connection on one system but not
> the other?
> >
> > Do not forget that in RHEL/CentOS 6 that you also should have package
> ca-certificates installed/updated. It may be a contributing factor here.
> >
> > More and more of this family of distributions is pointing at
> /etc/pki/tls/certs
> >
> > to handle certificate processing.  I was recently reminded of this when
> i was trying to help a coworker get Citrix Receiver installed, and that
> software comes effectively with NO certificates.  Linking in the certs from
> /etc/pki/tls/certs fixed that, and guarantees to follow updates by the
> distro.
> >
> > Brian
> >
> >
> > _______________________________________________
> > Ale mailing list
> > Ale at ale.org
> > http://mail.ale.org/mailman/listinfo/ale
> > See JOBS, ANNOUNCE and SCHOOLS lists at
> > http://mail.ale.org/mailman/listinfo
> >
> >
> >
> >
> > Athena(r), Created for the Cause(tm)
> > Making a Difference in the Fight Against Breast Cancer
> >
> > ---------------------------------
> > CONFIDENTIALITY NOTICE: This e-mail may contain privileged or
> confidential information and is for the sole use of the intended
> recipient(s). If you are not the intended recipient, any disclosure,
> copying, distribution, or use of the contents of this information is
> prohibited and may be unlawful. If you have received this electronic
> transmission in error, please reply immediately to the sender that you have
> received the message in error, and delete it. Thank you.
> > ----------------------------------
> >
> >
> > _______________________________________________
> > Ale mailing list
> > Ale at ale.org
> > http://mail.ale.org/mailman/listinfo/ale
> > See JOBS, ANNOUNCE and SCHOOLS lists at
> > http://mail.ale.org/mailman/listinfo
> >
>
> --
> Sent from my home PC running Fedora18 to you and NSA, FBI, CIA, HSA
> and God only knows who else!!!!!!!!!!!!!!!!
> _______________________________________________
> Ale mailing list
> Ale at ale.org
> http://mail.ale.org/mailman/listinfo/ale
> See JOBS, ANNOUNCE and SCHOOLS lists at
> http://mail.ale.org/mailman/listinfo
>



-- 
-- 
James P. Kinney III
*
*Every time you stop a school, you will have to build a jail. What you gain
at one end you lose at the other. It's like feeding a dog on his own tail.
It won't fatten the dog.
- Speech 11/23/1900 Mark Twain
*
http://heretothereideas.blogspot.com/
*
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.ale.org/pipermail/ale/attachments/20130807/8cc269eb/attachment.html>