I got the answer on serverfault at the link below. It looks like godaddy isn't doing their job of hosting certificates correctly.
Here's a workaround from serverfault: wget -q https://certs.godaddy.com/repository/gdig2.crt wget -q --ca-certificate gdig2.crt -O - https://debian.neo4j.org/neotechnology.gpg.key | apt-key add - *Could someone harangue godaddy and get them to fix this?* But now I know that this is really *your* gpg key for sure. On 09/16/2015 09:56 AM, Alan Robertson wrote: > > I also asked this question on serverfault: > http://serverfault.com/questions/722770/which-ubuntu-package-has-the-ca-for-debian-neo4j-org-godaddy > > The neo4j site shows that I should get the neo4j GPG signing key > using |wget -q -O - http://debian.neo4j.org/neotechnology.gpg.key| > > This of course, could allow the certificate to be hacked, and I would > not be able to tell. Bad news. So, I really should > use*https*://debian.neo4j.org/neotechnology.gpg.key instead. But when > I do, neither wget nor curl can find the certificate. On the other > hand, Chrome seems perfectly happy with it. Here's the detailed > message from wget: > > ERROR: cannot verify debian.neo4j.org's certificate, issued by > ‘CN=Go Daddy Secure Certificate Authority - > G2,OU=http://certs.godaddy.com/repository/,O=GoDaddy.com\, > Inc.,L=Scottsdale,ST=Arizona,C=US’: > > I have to use a command line tool in this context, and it really needs > to be gotten via https or it doesn't do what it's intended to do... > Which debian/Ubuntu package will install the needed certificate authority? > > [I already know about *--no-check-certificate*. That doesn't solve the > problem] > > -- > > Alan Robertson / CTO > al...@assimilationsystems.com <mailto:al...@assimilationsystems.com>/ > +1 303.947.7999 > > Assimilation Systems Limited > http://AssimilationSystems.com > > Twitter <https://twitter.com/ossalanr> Linkedin > <https://www.linkedin.com/in/alanr> skype > <https://htmlsig.com/skype?username=alanr_unix.sh> > > -- > You received this message because you are subscribed to the Google > Groups "Neo4j" group. > To unsubscribe from this group and stop receiving emails from it, send > an email to neo4j+unsubscr...@googlegroups.com > <mailto:neo4j+unsubscr...@googlegroups.com>. > For more options, visit https://groups.google.com/d/optout. -- Alan Robertson / CTO al...@assimilationsystems.com <mailto:al...@assimilationsystems.com>/ +1 303.947.7999 Assimilation Systems Limited http://AssimilationSystems.com Twitter <https://twitter.com/ossalanr> Linkedin <https://www.linkedin.com/in/alanr> skype <https://htmlsig.com/skype?username=alanr_unix.sh> -- You received this message because you are subscribed to the Google Groups "Neo4j" group. To unsubscribe from this group and stop receiving emails from it, send an email to neo4j+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.