curl/wget error downloading RPM-GPG-KEY.art.txt

Support/Development for OSSEC
drewlander
New Forum User
New Forum User
Posts: 1
Joined: Fri Nov 16, 2018 10:15 am
Location: United States

curl/wget error downloading RPM-GPG-KEY.art.txt

Unread post by drewlander »

This is happening on CentOS/Ubuntu/Debian/OSX and windows boxes when using WSL:
We are unable to download that file. The "official" OSSEC installer tries to do a

Code: Select all

wget -q https://www.atomicorp.com/RPM-GPG-KEY.art.txt 1>/dev/null 2>&1
and the installer fails as it cannot get that file.
If you just run that command without the q, I get:

Code: Select all

ERROR: cannot verify www.atomicorp.com's certificate, issued by ‘CN=Go Daddy Secure Certificate Authority - G2,OU=http://certs.godaddy.com/repository/,O=GoDaddy.com\\, Inc.,L=Scottsdale,ST=Arizona,C=US’:
  Unable to locally verify the issuer's authority.
If I run:

Code: Select all

openssl s_client -verify on  -CApath /etc/ssl/certs -connect www.atomicorp.com:443 
The following is returned:

Code: Select all

 CONNECTED(00000003)
depth=0 OU = Domain Control Validated, CN = *.atomicorp.com
verify error:num=20:unable to get local issuer certificate
verify return:1
depth=0 OU = Domain Control Validated, CN = *.atomicorp.com
verify error:num=21:unable to verify the first certificate
verify return:1
---
Certificate chain
 0 s:/OU=Domain Control Validated/CN=*.atomicorp.com
   i:/C=US/ST=Arizona/L=Scottsdale/O=GoDaddy.com, Inc./OU=http://certs.godaddy.com/repository//CN=Go Daddy Secure Certificate Authority - G2
......<bunch of stuff>....
Verify return code: 21 (unable to verify the first certificate)
This is happening with curl/wget on CentOS/Debian/Ubuntu/OSX (and running the wget https://www.atomicorp.com/RPM-GPG-KEY.art.txt on a Windows Subsystem for linux box).
This started happening yesterday.
I see the timestamp on the atomicorp.com cert is: Thursday, November 15, 2018 at 3:54:13 PM and we just started having these issues last evening.
Is there something I need to do on my end?
Thank you
Post Reply