Certificate not trusted

[schmurian]

Hello,

After downloading, I wanted to test httptap by running the same download command with httptap in front but it resulted in this Error:

 httptap -- wget https://github.com/monasticacademy/httptap/releases/download/v0.0.8/httptap_linux_arm64.tar.gz
--2025-02-04 06:47:41--  https://github.com/monasticacademy/httptap/releases/download/v0.0.8/httptap_linux_arm64.tar.gz
Resolving github.com (github.com)... 140.82.121.3
Connecting to github.com (github.com)|140.82.121.3|:443... connected.
ERROR: The certificate of ‘github.com’ is not trusted.
ERROR: The certificate of ‘github.com’ doesn't have a known issuer.
error reading http request over tls server conn: EOF, aborting
subprocess exited with code 5

[alexflint]

Thanks for reporting @schmurian. Sorry about this - what version of wget are you using here?

[alexflint]

Just to help me debug, can you try it like this?

httptap -- bash -c 'wget --ca-certificate=$SSL_CERT_FILE https://github.com/monasticacademy/httptap/releases/download/v0.0.8/httptap_linux_arm64.tar.gz'

[schmurian]

Version is:
GNU Wget 1.21.3 built on linux-gnu.

[schmurian]

Yes, you're right it must have been wget.

When I run your command, it works:

httptap -- bash -c 'wget --ca-certificate=$SSL_CERT_FILE https://github.com/monasticacademy/httptap/releases/download/v0.0.8/httptap_linux_arm64.tar.gz'
--2025-02-04 17:43:14--  https://github.com/monasticacademy/httptap/releases/download/v0.0.8/httptap_linux_arm64.tar.gz
Loaded CA certificate '/tmp/1417439103/ca-certificates.crt'
Resolving github.com (github.com)... 140.82.121.3
Connecting to github.com (github.com)|140.82.121.3|:443... connected.
HTTP request sent, awaiting response... 302 Found
---> GET https://github.com/monasticacademy/httptap/releases/download/v0.0.8/httptap_linux_arm64.tar.gz
Location: https://objects.githubusercontent.com/github-production-release-asset-2e65be/873013059/72b4d124-5896-49f1-8137-a3641d5ec1a0?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20250204%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20250204T164315Z&X-Amz-Expires=300&X-Amz-Signature=fcb154e8bb73be4738e2d143c32c630021b67e9f03123c32ce4065baaeb5cb8a&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3Dhttptap_linux_arm64.tar.gz&response-content-type=application%2Foctet-stream [following]
<--- 302 https://github.com/monasticacademy/httptap/releases/download/v0.0.8/httptap_linux_arm64.tar.gz (0 bytes)
--2025-02-04 17:43:15--  https://objects.githubusercontent.com/github-production-release-asset-2e65be/873013059/72b4d124-5896-49f1-8137-a3641d5ec1a0?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20250204%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20250204T164315Z&X-Amz-Expires=300&X-Amz-Signature=fcb154e8bb73be4738e2d143c32c630021b67e9f03123c32ce4065baaeb5cb8a&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3Dhttptap_linux_arm64.tar.gz&response-content-type=application%2Foctet-stream
Resolving objects.githubusercontent.com (objects.githubusercontent.com)... 185.199.109.133, 185.199.111.133, 185.199.110.133, ...
Connecting to objects.githubusercontent.com (objects.githubusercontent.com)|185.199.109.133|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 4288317 (4.1M) [application/octet-stream]
Saving to: ‘httptap_linux_arm64.tar.gz’
httptap_linux_ar 100%[========>]   4.09M  3.78MB/s    in 1.1s
2025-02-04 17:43:17 (3.78 MB/s) - ‘httptap_linux_arm64.tar.gz’ saved [4288317/4288317]

[gwillem]

No problem here with GNU Wget 1.21.4 built on linux-gnu. You can run this do find out where wget looks for its certs:

sudo strace -e file -f -o wget.log wget https://google.com/robots.txt
egrep 'cert|pem|ssl` wget.log