npm ERR! Error: UNABLE_TO_VERIFY_LEAF_SIGNATURE

[aredridel]

:; npm star npm
npm http GET https://registry.npmjs.org/npm
npm http 200 https://registry.npmjs.org/npm
npm ERR! Error: UNABLE_TO_VERIFY_LEAF_SIGNATURE
npm ERR! at SecurePair. (tls.js:1253:32)
npm ERR! at SecurePair.EventEmitter.emit (events.js:91:17)
npm ERR! at SecurePair.maybeInitFinished (tls.js:865:10)
npm ERR! at CleartextStream.read as _read
npm ERR! at CleartextStream.Readable.read (_stream_readable.js:216:10)
npm ERR! at EncryptedStream.write as _write
npm ERR! at EncryptedStream.Writable.write (_stream_writable.js:176:8)
npm ERR! at write (_stream_readable.js:481:24)
npm ERR! at flow (_stream_readable.js:491:7)
npm ERR! at Socket.pipeOnReadable (_stream_readable.js:523:5)
npm ERR! If you need help, you may report this log at:
npm ERR! http://github.com/isaacs/npm/issues
npm ERR! or email it to:
npm ERR! npm-@googlegroups.com

[aredridel]

node v0.9.9

[isaacs]

What version of npm is this? It should have the npmCA cert baked into the configs.

[aredridel]

1.2.11. It could be misloading the config files though.

[isaacs]

@aredridel what does this output?

npm config ls
npm config get ca

[aredridel]

:; npm config ls
; cli configs
registry = "https://registry.npmjs.org/"

; userconfig /home/users/aredridel/.npmrc
email = "aredridel@nbtsc.org"
tar = "/usr/bin/gtar"
username = "aredridel"

; globalconfig /etc/npmrc
globalconfig = "/etc/npmrc"
globalignorefile = "/etc/npmignore"

; builtin config undefined
globalconfig = "/etc/npmrc"
globalignorefile = "/etc/npmignore"

; node bin location = /usr/bin/node
; cwd = /home/users/aredridel/rpm/packages
; HOME = /home/users/aredridel
; 'npm config ls -l' to show all defaults.

[aredridel]

Hm. Working now. I updated npmconf, and tar. Both were acceptable versions according to package.json though.

[isaacs]

You should probably always just use the bundled copies of npm's deps. Whatever the package.json says, I don't ever test with any other version besides the bundled ones. That's why they're listed as bundledDependencies. They might even have floating patches or other stuff.

[aredridel]

Indeed. I'm trying to beat my distro's packaging of npm into sanity, but the policy so far is to install things separately. It's kind of annoying, though I see their point. Yay bridging gaps!