Installing curl with ssl so I can install homebrew -


the solution

i used bruno's post find solution, feel needs made more concrete, explicitly did.

  1. downloaded cacert.pem ~/.ssh dir (i don't know if should go, saw similar while trying find solution, put it).
  2. set env var curl_ca_bundle installation. solution number 4 the website suggested failure. misunderstood saying (a simple example might have saved me hours of confusion). anyway, you'll need specify full path .pem file, can install $ curl_ca_bundle=~/.ssh/cacert.pem ruby -e "$(curl -fssl https://raw.github.com/gist/323731)" , installed!

the original question

how either

  1. install homebrew, or
  2. install curl ssl can install homebrew?

i'm on mac osx leopard.

i'm trying install homebrew, following error:

$ ruby -e "$(curl -fssl https://raw.github.com/gist/323731)" ==> script install: /usr/local/bin/brew /usr/local/library/formula/... /usr/local/library/homebrew/... ==> following directories made group writable: /usr/local/bin /usr/local/lib /usr/local/lib/pkgconfig /usr/local/share/man/man1 /usr/local/share/man/man3  press enter continue ==> /usr/bin/sudo /bin/chmod g+w /usr/local/bin /usr/local/lib /usr/local/lib/pkgconfig /usr/local/share/man/man1 /usr/local/share/man/man3 ==> downloading , installing homebrew... curl: (60) ssl certificate problem, verify ca cert ok. details: error:14090086:ssl routines:ssl3_get_server_certificate:certificate verify failed more details here: http://curl.haxx.se/docs/sslcerts.html  curl performs ssl certificate verification default, using "bundle"  of certificate authority (ca) public keys (ca certs). default  bundle named curl-ca-bundle.crt; can specify alternate file  using --cacert option. if https server uses certificate signed ca represented in  bundle, certificate verification failed due  problem certificate (it might expired, or name might  not match domain name in url). if you'd turn off curl's verification of certificate, use  -k (or --insecure) option.  gzip: stdin: unexpected end of file /usr/bin/tar: child returned status 1 /usr/bin/tar: error exit delayed previous errors failed during: /bin/bash -o pipefail -c '/usr/bin/curl -ssfl https://github.com/mxcl/homebrew/tarball/master | /usr/bin/tar xz -m --strip 1' 

i tried installing curl macports , specifying +ssl, didn't work (sorry, don't remember error was, , took hour point, don't want again). uninstall curl macports , run $ whereis curl finds nothing.

so go the site suggested in error message above. of options don't seem applicable, option 5 makes sense:

get better/different/newer ca cert bundle! 1 option extract 1 recent firefox browser uses running 'make ca-bundle' in curl build tree root

so curl source code , run $ ./buildconf, $ ./configure, $ make, $ make ca-bundle, , $ sudo make install. check $ whereis curl , says "/usr/bin/curl".

but when run homebrew install command again (in new terminal window), same error shown above.

you don't need recompile curl, has ssl/tls support, otherwise, wouldn't display error:14090086:ssl routines:ssl3_get_server_certificate:certificate verify failed.

what need bundle of ca certificates such server certificate of server you're trying talk issued 1 of cas.

the curl page link links http://curl.haxx.se/docs/caextract.html

you should able download combined pem bundle , use it. force using curl -fssl --cacert /path/to/bundle.pem https://... in command above, or use export curl_ca_bundle=/path/to/bundle.pem before running command.

normally, you'd need way trust what's inside bundle, there's element of "leap of faith" when comes importing commercial cas (in same way bundled browsers).


Comments

Popular posts from this blog

c++ - Is it possible to compile a VST on linux? -

java - Output of Eclipse is rubbish -

jquery - Confused with JSON data and normal data in Django ajax request -