Public bug reported: I am updating a script to use a new version of the US National Weather Service API and am running into a certificate problem.
kjotte@daedalus:/tmp$ curl https://api-v1.weather.gov/ curl: (60) server certificate verification failed. CAfile: /etc/ssl/certs/ca-certificates.crt CRLfile: none ... I have run update-ca-certificates to ensure the master bundle is current. This URL is accessible in Firefox with correct validation. Workaround: kjotte@daedalus:/tmp$ curl -sO https://certs.godaddy.com/repository/gd_bundle-g2.crt kjotte@daedalus:/tmp$ curl --cacert ./gd_bundle-g2.crt https://api-v1.weather.gov/ {"status":"OK"} Please update the system certificate store so I don't have to load the GoDaddy cert bundle on every machine I'll be running my scripts on. ProblemType: Bug DistroRelease: Ubuntu 16.04 Package: ca-certificates 20160104ubuntu1 ProcVersionSignature: Ubuntu 4.4.0-59.80-generic 4.4.35 Uname: Linux 4.4.0-59-generic x86_64 ApportVersion: 2.20.1-0ubuntu2.4 Architecture: amd64 CurrentDesktop: XFCE Date: Thu Jan 12 12:43:45 2017 EcryptfsInUse: Yes InstallationDate: Installed on 2011-12-09 (1861 days ago) InstallationMedia: Xubuntu 11.10 "Oneiric Ocelot" - Release amd64 (20111012) PackageArchitecture: all SourcePackage: ca-certificates UpgradeStatus: Upgraded to xenial on 2016-05-31 (226 days ago) ** Affects: ca-certificates (Ubuntu) Importance: Undecided Status: New ** Tags: amd64 apport-bug xenial -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1656054 Title: Unable to validate GoDaddy signed certs To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/ca-certificates/+bug/1656054/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
