Centos SSL 过期问题三个解决方案

最新推荐文章于 2025-07-01 11:46:42 发布

jiufreeman

最新推荐文章于 2025-07-01 11:46:42 发布

阅读量1.8k

点赞数

CC 4.0 BY-SA版权

分类专栏： Linux 文章标签： centos

本文链接：https://blog.csdn.net/dcj3sjt126com/article/details/84696806

Linux 专栏收录该内容

121 篇文章

订阅专栏

本文详细介绍了在Linux环境下遇到GitHub SSL证书验证错误时的三种解决方案：临时禁用SSL验证、更新CA证书包以及替换旧版CA证书。通过执行特定命令，可以解决由过期的证书权威包导致的问题。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

解决方案地址: http://www.megaleecher.net/SSL_Certificate_Verification_Error_in_Linux#axzz3P9axfRfp

返回错误信息如下:

fatal: unable to access 'https://github.com/gmarik/Vundle.vim.git/': SSL certificate problem, verify that the CA cert is OK. Details:

error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed

The reason for the error is older version of CentOS 5.XX having expired certificate authority bundles, the root certificate bundle is located at :

/etc/pki/tls/certs/ca-bundle.crt

Solution One : Disable SSL for Github (Fastest)
Execute the command

git config --system http.sslVerify false

on console and retry connecting, this will simply bypass the SSL verification. Do mind that this can be dangerous from security point of view, SSL signature verification exists to safeguard against man in the middle attacks and this disables that safety feature. Use only when other solution's shared below does not work.

Solution Two : Update the CA certificate bundle (Recommended)
Use

yum update openssl

or equivalent command to get the latest version of OpenSSL library which will renew the working set of CA certificates (ca-bundle.crt).

Solution Three : Replace the old CA certificate's using cURL
Use curl and replace the certificate bundle with new ones using

curl http://curl.haxx.se/ca/cacert.pem -o /etc/pki/tls/certs/ca-bundle.crt