Симптом:
$ curl https://raw.githubusercontent.com/bagder/curl/master/lib/mk-ca-bundle.pl
curl: (60) SSL certificate problem, verify that the CA cert is OK. Details:
error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed
More details here: http://curl.haxx.se/docs/sslcerts.html
Лечение:
# apt-get purge ca-certificates
# wget http://ftp.us.debian.org/debian/pool/main/c/ca-certificates/ca-certificates_20090814+nmu3squeeze1_all.deb
# make-ssl-cert generate-default-snakeoil --force-overwrite
# dpkg -i ca-certificates_20090814+nmu3squeeze1_all.deb
Правда wget все равно продолжается жаловаться, лечения пока нет:
# wget https://raw.githubusercontent.com/bagder/curl/master/lib/mk-ca-bundle.pl
--13:57:06-- https://raw.githubusercontent.com/bagder/curl/master/lib/mk-ca-bundle.pl
=> `mk-ca-bundle.pl'
Resolving raw.githubusercontent.com... 23.235.43.133
Connecting to raw.githubusercontent.com|23.235.43.133|:443... connected.
ERROR: certificate common name `www.github.com' doesn't match requested host name `raw.githubusercontent.com'.
To connect to raw.githubusercontent.com insecurely, use `--no-check-certificate'.
Unable to establish SSL connection.