curl https://files.directadmin.com = curl: (60) SSL certificate problem: certificate has expired

[ezh]

Debian 11.5. I cannot update anything in CustomBuild 2.0 due to:
curl https://files.directadmin.com/servi...4/mariadb-10.2.44-linux-systemd-x86_64.tar.gz
curl: (60) SSL certificate problem: certificate has expired

What may be wrong?

 

[dennisb84]

Hi,

I'm experiencing the same problems when trying to update.

 

[dennisb84]

The certificates on files.directadmin.com seems to be okay:

SSL Server Test: files.directadmin.com (Powered by Qualys SSL Labs)

 

[wtptrs]

Debian 11.5. I cannot update anything in CustomBuild 2.0 due to:
curl https://files.directadmin.com/servi...4/mariadb-10.2.44-linux-systemd-x86_64.tar.gz
curl: (60) SSL certificate problem: certificate has expired

What may be wrong?

Since you're trying to upgrade mariadb 10.2, I assume this is not a fresh Debian 11 install but an upgrade from an older Debian version. Try to upgrade your server certificates:

apt update; apt install ca-certificates

 

[dennisb84]

Thanks, in my situation (centos) the following command was the solution:

yum install ca-certificates

 

[ezh]

0.
cat /etc/debian_version
11.5

1.
apt install ca-certificates
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
ca-certificates is already the newest version (20210119).


2.
mysql -V
mysql Ver 15.1 Distrib 10.1.48-MariaDB, for Linux (x86_64) using readline 5.1


3. apt install mariadb-server
Setting up mariadb-server (1:10.5.15-0+deb11u1) ...

But still
mysql -V
mysql Ver 15.1 Distrib 10.1.48-MariaDB, for Linux (x86_64) using readline 5.1


4. As I understand, DirectAdmin uses his own compilations of SW.


5. I have those in updates in CustomBuild (BTW incl curl...). And I cannot update it.

 

[ezh]

Curl cannot update curl...

• Executing /usr/local/directadmin/plugins/custombuild/admin/build curl...
• curl: (60) SSL certificate problem: certificate has expired
• More details here: https://curl.se/docs/sslcerts.html
• curl failed to verify the legitimacy of the server and therefore could not
• establish a secure connection to it. To learn more about this situation and
• how to fix it, please visit the web page mentioned above.
• Download of https://files.directadmin.com/services/custombuild/curl-7.85.0.tar.gz failed, re-downloading the file...
• curl: (60) SSL certificate problem: certificate has expired
• More details here: https://curl.se/docs/sslcerts.html

< >

• curl failed to verify the legitimacy of the server and therefore could not
• establish a secure connection to it. To learn more about this situation and
• how to fix it, please visit the web page mentioned above.
• Download of https://files.directadmin.com/services/custombuild/curl-7.85.0.tar.gz failed, re-downloading the file...
• Download of https://files.directadmin.com/services/custombuild/curl-7.85.0.tar.gz failed 4 times, exiting...
• Done!

 

[wtptrs]

Try the commands in the link below. If curl doesn't work, try wget or download the .pem file on another device and upload and paste it in the correct location on your server:

since 2022-8-26, ertificate has expired. centos6.8

since 2022-8-26, ertificate has expired. Login Da display: License check failure See the Debug Guide Reason: request failed: Post "https://licensing.directadmin.com/start": x509: certificate has expired or is not yet valid: current time 2022-08-26T21:51:57+08:00 is after 2021-09-30T14:01:15Z...

forum.directadmin.com

Also, you should not install mariadb-server via apt-get, it conflicts with the Custombuild version.

 

[ezh]

1. curl -k -o /etc/ssl/certs/ISRG_Root_X1.pem https://letsencrypt.org/certs/isrgrootx1.pem
% Total % Received % Xferd Average Speed Time Time Time Current Dload Upload Total Spent Left Speed
100 1939 100 1939 0 0 2859 0 --:--:-- --:--:-- --:--:-- 2859

2. apt install nss*
installed some packages

3. systemctl restart directadmin

problem with sert still here:

• Executing /usr/local/directadmin/plugins/custombuild/admin/build curl...
• curl: (60) SSL certificate problem: certificate has expired
• More details here: https://curl.se/docs/sslcerts.html

How can I try to change directadmin to use wget? Could not find anything about on the forum/internet.

 

[ezh]

BTW made:
apt remove mariadb-server

 

[wtptrs]

Sorry I meant use wget to retrieve the letsencrypt .pem file. But you managed to download it and it still doesn't solve your issue, so I'm not sure at this point. I think it's related to the issue in the link (your server not having the right certificate to connect to a https-site encrypted with a Let's Encrypt certificate) but it's difficult to troubleshoot further from the outside.