wget on Windows gives 'ERROR: cannot verify x's certificate,'

[onet4]

Hi,

When I tried to run install-wp-tests.sh, on the line that uses wget, I got this:

ERROR: cannot verify raw.github.com's certificate, issued by 'CN=DigiCert SHA2 H
igh Assurance Server CA,OU=www.digicert.com,O=DigiCert Inc,C=US':
Unable to locally verify the issuer's authority.
To connect to raw.github.com insecurely, use `--no-check-certificate'.

I tried both versions of wget 1.11.4 (http://gnuwin32.sourceforge.net/packages/wget.htm) and 1.16.1 (https://eternallybored.org/misc/wget/) and both gave this error.

It seems to occur when trying to access a url with the https protocol. If I add the --no-check-certificate option, it works.

wget -nv -O /tmp/wordpress.tar.gz https://wordpress.org/${ARCHIVE_NAME}.tar.gz --no-check-certificate

[danielbachhuber]

The error is probably with this call:

wget -nv -O $WP_CORE_DIR/wp-content/db.php https://raw.github.com/markoheijnen/wp-mysqli/master/db.php

You'll need to update your local certs. This blog post looks like it might offer the right direction: http://thenubbyadmin.com/2014/01/29/solving-wget-error-cannot-verify-site-certificate-unable-to-locally-verify-the-issuers-authority/

[onet4]

The error is probably with this call:

That particular error is caused by the line accessing github.com but the error "ERROR: cannot verify x's certificate" occurs on every line using wget with SSL in that script including the line accessing wordpress.org.

I downloaded a certification file from here and used the --ca-certificate option of wget and it does not give the error.

wget -nv -O wordpress.tar.gz https://wordpress.org/wordpress-latest.tar.gz --ca-certificate gd-class2-root.crt

I thought this kind of certification issue only occurs on Windows which does not natively support wget. However, this issue seems to be not uncommon among different platforms and applications. What about changing it to use curl instead of wget?

[danielbachhuber]

#1636 defaults to curl, but hasn't been released yet. You can use the nightly if you'd like: https://github.com/wp-cli/wp-cli/wiki/Alternative-Install-Methods#installing-nightly-via-phar