-
Notifications
You must be signed in to change notification settings - Fork 28
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Need a command line switch to disable SSL certificate validation #76
Comments
In some cases, it might be useful to automatically try the same URL but with HTTP instead of HTTPS to see if that works. This is a solution in use for some BigFix items, particularly in the case of OS X 10.10 that is preventing some downloads from working. BigFix does additional validation of the files downloaded, so a man in the middle attack is not a concern. Related: #74 |
Recipe Robot 2+ now uses curl for downloading. I imagine both HTTP and HTTPS connections are supported, but HTTP connections with expired/incorrect certificates are not. (And shouldn't be, IMO.) |
In some cases, it is useful to pull a download from an internal organization's webserver / software repo / etc... which may be using a self-signed cert.
Also, if there is an odd issue with the certificate and after investigating, you find out that it has recently expired, it would be a bummer to have to wait around for the other end to fix the problem.
Message:
[WARNING] Error encountered during file download. ([SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:590))
Screenshot:
![screen shot 2015-11-16 at 9 09 08 pm](https://cloud.githubusercontent.com/assets/2439367/11203201/6b45b9a8-8ca6-11e5-9643-0f8011dffa23.png)
Related Issues:
The text was updated successfully, but these errors were encountered: