Issue with openssl

English Network/Internet
1

Hi there and thx for reading and answering if you can

I’m trying to download a raku file stuff from a server with https protocol, with:

wget https://360.zef.pm/R/EA/READLINE/f62b94759eb525560020a1b71ddd075c25d1af1f.tar.gz

However wget returns:

Resolving 360.zef.pm (360.zef.pm)... 3.165.190.41, 3.165.190.126, 3.165.190.99, ...
Connecting to 360.zef.pm (360.zef.pm)|3.165.190.41|:443... connected.
ERROR: cannot verify 360.zef.pm's certificate, issued by ‘CN=Amazon RSA 2048 M03,O=Amazon,C=US’:
  Unable to locally verify the issuer's authority.
To connect to 360.zef.pm insecurely, use `--no-check-certificate'.

whereas the same command correctly performs on Ubuntu. It seems to be related to ssl certificates.

Any idea ?

Thx again

2

Here it is working:

wget https://360.zef.pm/R/EA/READLINE/f62b94759eb525560020a1b71ddd075c25d1af1f.tar.gz
--2024-08-17 21:00:27--  https://360.zef.pm/R/EA/READLINE/f62b94759eb525560020a1b71ddd075c25d1af1f.tar.gz
Resolving 360.zef.pm (360.zef.pm)... 108.156.60.48, 108.156.60.70, 108.156.60.12, ...
Connecting to 360.zef.pm (360.zef.pm)|108.156.60.48|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 35026 (34K) [binary/octet-stream]
Saving to: 'f62b94759eb525560020a1b71ddd075c25d1af1f.tar.gz.1'

f62b94759eb525560020a1b71d 100%[=====================================>]  34,21K  --.-KB/s    in 0,04s   

2024-08-17 21:00:27 (924 KB/s) - 'f62b94759eb525560020a1b71ddd075c25d1af1f.tar.gz.1' saved [35026/35026]



lsb-release -id
Distributor ID: openSUSE
Description:    openSUSE Leap 15.6

I get another IP…

3 
zypper lr -d
#  | Alias                       | Name                                                                 | Enabled | GPG Check | Refresh | Priority | Type   | URI                                                                     | Service
---+-----------------------------+----------------------------------------------------------------------+---------+-----------+---------+----------+--------+-------------------------------------------------------------------------+--------
 1 | packman                     | Packman                                                              | Oui     | (r ) Oui  | Oui     |   90     | rpm-md | https://ftp.gwdg.de/pub/linux/misc/packman//suse/openSUSE_Leap_15.6/    | 
 2 | repo-backports-debug-update | Update repository of openSUSE Backports (Debug)                      | Non     | ----      | ----    |   99     | N/A    | http://download.opensuse.org/update/leap/15.6/backports_debug/          | 
 3 | repo-backports-update       | Update repository of openSUSE Backports                              | Oui     | (r ) Oui  | Oui     |   99     | rpm-md | http://download.opensuse.org/update/leap/15.6/backports/                | 
 4 | repo-debug                  | Debug Repository                                                     | Non     | ----      | ----    |   99     | N/A    | http://download.opensuse.org/debug/distribution/leap/15.6/repo/oss/     | 
 5 | repo-debug-non-oss          | Debug Repository (Non-OSS)                                           | Non     | ----      | ----    |   99     | N/A    | http://download.opensuse.org/debug/distribution/leap/15.6/repo/non-oss/ | 
 6 | repo-debug-update           | Update Repository (Debug)                                            | Non     | ----      | ----    |   99     | N/A    | http://download.opensuse.org/debug/update/leap/15.6/oss/                | 
 7 | repo-debug-update-non-oss   | Update Repository (Debug, Non-OSS)                                   | Non     | ----      | ----    |   99     | N/A    | http://download.opensuse.org/debug/update/leap/15.6/non-oss/            | 
 8 | repo-non-oss                | Dépôt Non-OSS                                                        | Oui     | (r ) Oui  | Oui     |   99     | rpm-md | http://download.opensuse.org/distribution/leap/15.6/repo/non-oss/       | 
 9 | repo-openh264               | Open H.264 Codec (openSUSE Leap)                                     | Oui     | (r ) Oui  | Oui     |   99     | rpm-md | http://codecs.opensuse.org/openh264/openSUSE_Leap/                      | 
10 | repo-oss                    | Dépôt principal                                                      | Oui     | (r ) Oui  | Oui     |   99     | rpm-md | http://download.opensuse.org/distribution/leap/15.6/repo/oss/           | 
11 | repo-sle-debug-update       | Update repository with updates from SUSE Linux Enterprise 15 (Debug) | Non     | ----      | ----    |   99     | N/A    | http://download.opensuse.org/debug/update/leap/15.6/sle/                | 
12 | repo-sle-update             | Update repository with updates from SUSE Linux Enterprise 15         | Oui     | (r ) Oui  | Oui     |   99     | rpm-md | http://download.opensuse.org/update/leap/15.6/sle/                      | 
13 | repo-source                 | Source Repository                                                    | Non     | ----      | ----    |   99     | N/A    | http://download.opensuse.org/source/distribution/leap/15.6/repo/oss/    | 
14 | repo-update                 | Dépôt principal de mise à jour                                       | Oui     | (r ) Oui  | Oui     |   99     | rpm-md | http://download.opensuse.org/update/leap/15.6/oss                       | 
15 | repo-update-non-oss         | Dépôt de mises à jour (Non-OSS)                                      | Oui     | (r ) Oui  | Oui     |   99     | rpm-md | http://download.opensuse.org/update/leap/15.6/non-oss/
4

[quote=“Sauerland, post:2, topic:177845”]
zypper se -si ssl
[/quote]zypper se -si ssl
Dépôt : Time since last refresh
Packman : 1 h 49 min
Update repository of openSUSE Backports : 1 h 49 min
Dépôt Non-OSS : 1 h 49 min
Open H.264 Codec (openSUSE Leap) : 1 h 49 min
Dépôt principal : 1 h 49 min
Update repository with updates from SUSE Linux Enterprise 15 : 1 h 49 min
Dépôt principal de mise à jour : 1 h 49 min
Dépôt de mises à jour (Non-OSS) : 1 h 49 min

Note : Running with user privileges. From time to time run 'zypper refresh' as root to make sure
the repository metadata are complete and up-to-date.

Chargement des données du dépôt…
Lecture des paquets installés…

S  | Name                | Type   | Version             | Arch   | Repository
---+---------------------+--------+---------------------+--------+-------------------------------------------------------------
i  | libopenssl-3-devel  | paquet | 3.1.4-150600.5.10.1 | x86_64 | Update repository with updates from SUSE Linux Enterprise 15
i+ | libopenssl-devel    | paquet | 3.1.4-150600.2.1    | noarch | Dépôt principal
i+ | libopenssl1_1       | paquet | 1.1.1w-150600.5.3.1 | x86_64 | Update repository with updates from SUSE Linux Enterprise 15
i  | libopenssl1_1-32bit | paquet | 1.1.1w-150600.5.3.1 | x86_64 | Update repository with updates from SUSE Linux Enterprise 15
i+ | libopenssl3         | paquet | 3.1.4-150600.5.10.1 | x86_64 | Update repository with updates from SUSE Linux Enterprise 15
i  | libopenssl3-32bit   | paquet | 3.1.4-150600.5.10.1 | x86_64 | Update repository with updates from SUSE Linux Enterprise 15
i+ | openssl             | paquet | 3.1.4-150600.2.1    | noarch | Dépôt principal
i+ | openssl-1_1         | paquet | 1.1.1w-150600.5.3.1 | x86_64 | Update repository with updates from SUSE Linux Enterprise 15
i+ | openssl-3           | paquet | 3.1.4-150600.5.10.1 | x86_64 | Update repository with updates from SUSE Linux Enterprise 15
i+ | perl-IO-Socket-SSL  | paquet | 2.84.0-150600.1.2   | noarch | Dépôt principal
i  | perl-Net-SMTP-SSL   | paquet | 1.04-1.3.1          | noarch | Dépôt principal
i+ | perl-Net-SSLeay     | paquet | 1.92-150600.1.2     | x86_64 | Dépôt principal
i+ | python3-pyOpenSSL   | paquet | 21.0.0-150400.7.62  | noarch | Dépôt principal
5

Please next time use LANG=C Command to get English output:

LANG=C zypper se -si ssl
Loading repository data...
Reading installed packages...

S  | Name                | Type    | Version              | Arch   | Repository
---+---------------------+---------+----------------------+--------+-------------------------------------------------------------
i+ | libopenssl-3-devel  | package | 3.1.4-150600.5.10.1  | x86_64 | Update repository with updates from SUSE Linux Enterprise 15
i+ | libopenssl-devel    | package | 3.1.4-150600.2.1     | noarch | OSS
i+ | libopenssl1_1       | package | 1.1.1w-150600.5.3.1  | x86_64 | Update repository with updates from SUSE Linux Enterprise 15
i+ | libopenssl3         | package | 3.1.4-150600.5.10.1  | x86_64 | Update repository with updates from SUSE Linux Enterprise 15
i  | openssl             | package | 3.1.4-150600.2.1     | noarch | OSS
i+ | openssl-1_1         | package | 1.1.1w-150600.5.3.1  | x86_64 | Update repository with updates from SUSE Linux Enterprise 15
i+ | openssl-3           | package | 3.1.4-150600.5.10.1  | x86_64 | Update repository with updates from SUSE Linux Enterprise 15
i  | perl-IO-Socket-SSL  | package | 2.84.0-150600.1.2    | noarch | OSS
i  | perl-Net-SMTP-SSL   | package | 1.04-1.3.1           | noarch | OSS
i  | perl-Net-SSLeay     | package | 1.92-150600.1.2      | x86_64 | OSS
i  | python3-pyOpenSSL   | package | 21.0.0-150400.7.62   | noarch | OSS
i+ | python311-pyOpenSSL | package | 23.2.0-150400.3.10.1 | noarch | Update repository with updates from SUSE Linux Enterprise 15

You are redirected to IP 3.165.190.41, I get 108.156.60.48

6 
ypper se -si ssl
Repository                                                   : Time since last refresh
Packman                                                      : 1 h 59 min 
Update repository of openSUSE Backports                      : 1 h 58 min 
Dépôt Non-OSS                                                : 1 h 58 min 
Open H.264 Codec (openSUSE Leap)                             : 1 h 58 min 
Dépôt principal                                              : 1 h 58 min 
Update repository with updates from SUSE Linux Enterprise 15 : 1 h 58 min 
Dépôt principal de mise à jour                               : 1 h 58 min 
Dépôt de mises à jour (Non-OSS)                              : 1 h 58 min 


    Note: Running with user privileges. From time to time run 'zypper refresh' as root to make sure
    the repository metadata are complete and up-to-date.

Loading repository data...
Reading installed packages...

S  | Name                | Type    | Version             | Arch   | Repository
---+---------------------+---------+---------------------+--------+-------------------------------------------------------------
i  | libopenssl-3-devel  | package | 3.1.4-150600.5.10.1 | x86_64 | Update repository with updates from SUSE Linux Enterprise 15
i+ | libopenssl-devel    | package | 3.1.4-150600.2.1    | noarch | Dépôt principal
i+ | libopenssl1_1       | package | 1.1.1w-150600.5.3.1 | x86_64 | Update repository with updates from SUSE Linux Enterprise 15
i  | libopenssl1_1-32bit | package | 1.1.1w-150600.5.3.1 | x86_64 | Update repository with updates from SUSE Linux Enterprise 15
i+ | libopenssl3         | package | 3.1.4-150600.5.10.1 | x86_64 | Update repository with updates from SUSE Linux Enterprise 15
i  | libopenssl3-32bit   | package | 3.1.4-150600.5.10.1 | x86_64 | Update repository with updates from SUSE Linux Enterprise 15
i+ | openssl             | package | 3.1.4-150600.2.1    | noarch | Dépôt principal
i+ | openssl-1_1         | package | 1.1.1w-150600.5.3.1 | x86_64 | Update repository with updates from SUSE Linux Enterprise 15
i+ | openssl-3           | package | 3.1.4-150600.5.10.1 | x86_64 | Update repository with updates from SUSE Linux Enterprise 15
i+ | perl-IO-Socket-SSL  | package | 2.84.0-150600.1.2   | noarch | Dépôt principal
i  | perl-Net-SMTP-SSL   | package | 1.04-1.3.1          | noarch | Dépôt principal
i+ | perl-Net-SSLeay     | package | 1.92-150600.1.2     | x86_64 | Dépôt principal
i+ | python3-pyOpenSSL   | package | 21.0.0-150400.7.62  | noarch | Dépôt principal
7

I did but some textes are still in french

8

I think, this is your problem.

9

Ok, but what could I do ?

10 

> To connect to 360.zef.pm insecurely, use `--no-check-certificate'.
11

It is not possible because the purpose of all that is not to download with wget, but to do it with the raku’s package manager: zef i.e.

zef install <mypackage>

but remember, it works with a virtualized ubuntu on the same machine

12

It also works in a virtualized Leap 15.6 here. Show the complete output of

openssl s_client 360.zef.pm:443 < /dev/null
13

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.