Installing curl with ssl so I can install homebrew -
the solution
i used bruno's post find solution, feel needs made more concrete, explicitly did.
- downloaded cacert.pem ~/.ssh dir (i don't know if should go, saw similar while trying find solution, put it).
- set env var curl_ca_bundle installation. solution number 4 the website suggested failure. misunderstood saying (a simple example might have saved me hours of confusion). anyway, you'll need specify full path .pem file, can install
$ curl_ca_bundle=~/.ssh/cacert.pem ruby -e "$(curl -fssl https://raw.github.com/gist/323731)", installed!
the original question
how either
- install homebrew, or
- install curl ssl can install homebrew?
i'm on mac osx leopard.
i'm trying install homebrew, following error:
$ ruby -e "$(curl -fssl https://raw.github.com/gist/323731)" ==> script install: /usr/local/bin/brew /usr/local/library/formula/... /usr/local/library/homebrew/... ==> following directories made group writable: /usr/local/bin /usr/local/lib /usr/local/lib/pkgconfig /usr/local/share/man/man1 /usr/local/share/man/man3 press enter continue ==> /usr/bin/sudo /bin/chmod g+w /usr/local/bin /usr/local/lib /usr/local/lib/pkgconfig /usr/local/share/man/man1 /usr/local/share/man/man3 ==> downloading , installing homebrew... curl: (60) ssl certificate problem, verify ca cert ok. details: error:14090086:ssl routines:ssl3_get_server_certificate:certificate verify failed more details here: http://curl.haxx.se/docs/sslcerts.html curl performs ssl certificate verification default, using "bundle" of certificate authority (ca) public keys (ca certs). default bundle named curl-ca-bundle.crt; can specify alternate file using --cacert option. if https server uses certificate signed ca represented in bundle, certificate verification failed due problem certificate (it might expired, or name might not match domain name in url). if you'd turn off curl's verification of certificate, use -k (or --insecure) option. gzip: stdin: unexpected end of file /usr/bin/tar: child returned status 1 /usr/bin/tar: error exit delayed previous errors failed during: /bin/bash -o pipefail -c '/usr/bin/curl -ssfl https://github.com/mxcl/homebrew/tarball/master | /usr/bin/tar xz -m --strip 1' i tried installing curl macports , specifying +ssl, didn't work (sorry, don't remember error was, , took hour point, don't want again). uninstall curl macports , run $ whereis curl finds nothing.
so go the site suggested in error message above. of options don't seem applicable, option 5 makes sense:
get better/different/newer ca cert bundle! 1 option extract 1 recent firefox browser uses running 'make ca-bundle' in curl build tree root
so curl source code , run $ ./buildconf, $ ./configure, $ make, $ make ca-bundle, , $ sudo make install. check $ whereis curl , says "/usr/bin/curl".
but when run homebrew install command again (in new terminal window), same error shown above.
you don't need recompile curl, has ssl/tls support, otherwise, wouldn't display error:14090086:ssl routines:ssl3_get_server_certificate:certificate verify failed.
what need bundle of ca certificates such server certificate of server you're trying talk issued 1 of cas.
the curl page link links http://curl.haxx.se/docs/caextract.html
you should able download combined pem bundle , use it. force using curl -fssl --cacert /path/to/bundle.pem https://... in command above, or use export curl_ca_bundle=/path/to/bundle.pem before running command.
normally, you'd need way trust what's inside bundle, there's element of "leap of faith" when comes importing commercial cas (in same way bundled browsers).
Comments
Post a Comment