How do I fix wget on an HTTP url not trusted errors in kali?

Question

When I try to run the wget command on http urls I get this error message:

ERROR: The certificate of `url' is not trusted.
ERROR: The certificate of `url' hasn't got a known issuer.

Possibly related question: http://stackoverflow.com/a/15252756/499768 — pbm, Jan 04 '17 at 22:11

score 38 · Accepted Answer · edited Dec 08 '20 at 21:33

38

If you are using Debian or Ubuntu, install the ca-certificates package:

$ sudo apt-get install ca-certificates

If you don't care about checking the validity of the certificate, use the --no-check-certificate option:

$ wget --no-check-certificate https://download/url

Note: The second option is not recommended because of the possibility of a man-in-the-middle attack.

edited Dec 08 '20 at 21:33

Freddy

25,172
1
21
60

answered Jan 05 '17 at 04:35

Rakib

2,347
1
17
20

Im using kali linux 2.O – Mordechai Hadad Jan 05 '17 at 11:08
Its telling me: Bus Error E: Sub-process /usr/bin/apt-listchanges --apt – Mordechai Hadad Jan 05 '17 at 16:36
This tells me that `ca-certificates` is already installed with the latest version. – David Oct 29 '19 at 11:11

score 5 · Answer 2 · answered Jan 05 '17 at 03:29

5

Per TFM for wget use the

--no-check-certificate

option.

"Don't check the server certificate against the available certificate authorities. Also don't require the URL host name to match the common name presented by the certificate."

answered Jan 05 '17 at 03:29

ivanivan

4,870
1
9
20

2

This is not an advice one should blindly follow without studying its implications. – gronostaj Feb 01 '21 at 10:29

score 1 · Answer 3 · answered Jul 30 '20 at 05:34

In my case, the root caused turned out to be an incorrect system date, which happened to be out of the certificate validity date range at the time of executing pip. This is related to the SSL library and not pip itself. Thus a simple wget or curl call to the offending URL will duplicate the issue.

Of course, I was also able to work around the issue quickly with --no-check--certificate (or equivalent) for wget and pip.

This might be a common case with working with SBC like RasberryPi/BeagleBone or any other system where a real-time clock (RTC) is not present out of the box. So lesson learned: Use NTP for to keep system time up-to-date whenever possible.

Same issue for me that the system time was wrong. npt service had crashed. `systemctl restart ntp` — Root James, May 12 '21 at 06:15

How do I fix wget on an HTTP url not trusted errors in kali?

3 Answers3