How do I get Leopard to work with ssl from the command line

 

Everything I try and connect to via https fails. Bellow is a curl output, but it does this with git mongo and everything. darwin just doesn't like https.

  • About to connect() to github.com port 443 (#0)
  • Trying 207.97.227.239... connected
  • Connected to github.com (207.97.227.239) port 443 (#0)
  • successfully set certificate verify locations:
  • CAfile: /usr/share/curl/curl-ca-bundle.crt CApath: none
  • SSLv2, Client hello (1):
  • SSLv3, TLS handshake, Server hello (2):
  • SSLv3, TLS handshake, CERT (11):
  • SSLv3, TLS alert, Server hello (2):
  • SSL certificate problem, verify that the CA cert is OK. Details: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed
  • Closing connection #0 curl: (60) SSL certificate problem, verify that the CA cert is OK. Details: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed

    • You might say not a problem just change https to http, yes this is fine when you only have 1 url like git clone but on rvm install about 50 of the required things fails to install because of this. I don't want to go into rvm and change all occurrences of https to http.

    Take a look at this post, slightly different, but i think it will answer you questions:

    SSL certificate rejected trying to access GitHub over HTTPS behind firewall

    You can essentially have OSX ignore the SSL Cert Verify, and accept the connection.

    It turned out that my version of curl was using an old certificate to validate https.

    I cam across this issue on git for cURL under Leopard:

    https://github.com/mxcl/homebrew/issues/11947

    And the error went away and I am now able to download https files from cURL.

    This looks like an issue with curl itself, rather than OSX. What version are you using? If it's particularly old, then the reference here to a "severely outdated CA file" probably applies.

    Try installing up-to-date versions of curl and git from macports.

    链接地址: http://www.djcxy.com/p/48970.html

    上一篇: git clone：HTTP请求致命

    下一篇: 我如何让Leopard从命令行使用ssl