curl SSL 认证错误

Question

我一直在尝试安装 meteor在我的 macbook pro 上，一直面临认证问题。我收到以下错误:

curl: (60) SSL certificate problem: self signed certificate in certificate chain More details here: https://curl.haxx.se/docs/sslcerts.html

curl performs SSL certificate verification by default, using a "bundle" of Certificate Authority (CA) public keys (CA certs). If the default bundle file isn't adequate, you can specify an alternate file using the --cacert option. If this HTTPS server uses a certificate signed by a CA represented in the bundle, the certificate verification probably failed due to a problem with the certificate (it might be expired, or the name might not match the domain name in the URL). If you'd like to turn off curl's verification of the certificate, use the -k (or --insecure) option.

使用 curl --insecure https://install.meteor.com 后 | ssh，我收到以下错误消息:

Downloading Meteor distribution

curl: (60) SSL certificate problem: unable to get local issuer certificate More details here: https://curl.haxx.se/docs/sslcerts.html

curl performs SSL certificate verification by default, using a "bundle" of Certificate Authority (CA) public keys (CA certs). If the default bundle file isn't adequate, you can specify an alternate file using the --cacert option. If this HTTPS server uses a certificate signed by a CA represented in the bundle, the certificate verification probably failed due to a problem with the certificate (it might be expired, or the name might not match the domain name in the URL). If you'd like to turn off curl's verification of the certificate, use the -k (or --insecure) option. Installation failed.

(注意安装失败消息)。

请任何人帮助我解决这个问题。

提前致谢。编辑:

在运行 curl install.meteor.com | 之后sh -x 就像 Fedor 让我运行一样，我收到以下消息:

• run_it
• RELEASE=1.2.1
• PREFIX=/usr/local
• set -e
• set -u
• exec ++ uname
• UNAME=Darwin
• '[' Darwin '>' MINGW -a Darwin '<' MINGX ']'
• '[' Darwin '!=' Linux -a Darwin '!=' Darwin ']'
• '[' Darwin = Darwin ']' ++ uname -p ++ sysctl -n hw.cpu64bit_capable
• '[' i386 '!=' i386 -o 1 '!=' 1 ']'
• grep BUNDLE_VERSION /usr/local/bin/meteor
• PLATFORM=os.osx.x86_64
• trap 'echo Installation failed.' EXIT
• '[' -e /Users/usama/.meteor ']'
• TARBALL_URL=https://d3sqy0vbqsdhku.cloudfront.net/packages-bootstrap/1.2.1/meteor-bootstrap-os.osx.x86_64.tar.gz
• INSTALL_TMPDIR=/Users/usama/.meteor-install-tmp
• rm -rf /Users/usama/.meteor-install-tmp
• mkdir /Users/usama/.meteor-install-tmp
• echo 'Downloading Meteor distribution' Downloading Meteor distribution
• curl --progress-bar --fail https://d3sqy0vbqsdhku.cloudfront.net/packages-bootstrap/1.2.1/meteor-bootstrap-os.osx.x86_64.tar.gz
• tar -xzf - -C /Users/usama/.meteor-install-tmp -o

Answer 1

快速回答是:您自己下载的安装脚本调用 curl 来下载 tarball，并且它没有 -k 选项:

$ curl -s https://install.meteor.com | grep curl
curl --progress-bar --fail "$TARBALL_URL" | tar -xzf - -C "$INSTALL_TMPDIR" -o

要将 curl 压入其中，您可以将 --insecure 添加到您的 curlrc 中:

$ echo insecure >> ~/.curlrc

或者只使用 http:

$ curl http://install.meteor.com

但我强烈建议您调查问题本身 - 可能有人正在攻击您。 install.meteor.com 的证书对我来说似乎很好。