Got problems SSL on CENTOS6.5

[nda888]

Hi everyone

Im using COS6.5 (COS=CentOS) but i got few problem about ca-certificates

When I download a file from bitbucket it alerts

wget https://bitbucket.org/nikratio/s3ql/downloads/s3ql-1.18.tar.bz2

--2015-07-06 10:50:50-- https://bitbucket.org/nikratio/s3ql/downloads/s3ql-1.18.tar.bz2
Resolving bitbucket.org... 131.103.20.167, 131.103.20.168
Connecting to bitbucket.org|131.103.20.167|:443... connected.
HTTP request sent, awaiting response... 302 FOUND
Location: https://bbuseruploads.s3.amazonaws....tion=attachment; filename="s3ql-1.18.tar.bz2" [following]
--2015-07-06 10:50:51-- https://bbuseruploads.s3.amazonaws....tion=attachment; filename="s3ql-1.18.tar.bz2"
Resolving bbuseruploads.s3.amazonaws.com... 54.231.244.9
Connecting to bbuseruploads.s3.amazonaws.com|54.231.244.9|:443... connected.
ERROR: cannot verify bbuseruploads.s3.amazonaws.com’s certificate, issued by “/C=US/O=VeriSign, Inc./OU=VeriSign Trust Network/OU=Terms of use at https://www.verisign.com/rpa (c)10/CN=VeriSign Class 3 Secure Server CA - G3”:
Unable to locally verify the issuer’s authority.
To connect to bbuseruploads.s3.amazonaws.com insecurely, use ‘--no-check-certificate’

I tried a lot of solution from Google but no luck

Even I upload the ca-burt.crt from virtual machine COS6.5 to server , but still got issue above

How can I resolve this problem?

If upgrade to COS6.6 does it conflict or affect to present DirectAdmin on server, I don't want this way, take a lot of time

Please help me

Thanks so much

 

[24x7server]

Hi,

You can either take wget advice and use the "--no-check-certificate", but that would be bad.

OR

Use an openssl s_client to check the certificate’s chain:

openssl s_client -connect sitename.com:443 -debug

 

[nda888]

Hi,

You can either take wget advice and use the "--no-check-certificate", but that would be bad.

OR

Use an openssl s_client to check the certificate’s chain:

openssl s_client -connect sitename.com:443 -debug

Thanks 24x7server

I debugged & received the status:

Start Time: 1436167180
Timeout : 300 (sec)
Verify return code: 0 (ok)

--no-check-certificate , this is a good idea,

I setup s3ql to mount to local server and storage my data and sync with AWS S3

But AWS use https and I stucked

So If I resolved this problem from wget , i can use s3ql to mount, present I can't

issued by “/C=US/O=VeriSign, Inc./OU=VeriSign Trust Network/OU=Terms of use at https://www.verisign.com/rpa (c)10/CN=VeriSign Class 3 Secure Server CA - G3”

Where is it from?

Could you help?

Thanks