Sign up ×
Unix & Linux Stack Exchange is a question and answer site for users of Linux, FreeBSD and other Un*x-like operating systems. It's 100% free, no registration required.

Sometimes I notice that I am unable to connect via SSL with curl and wget to websites that have certificates that should be valid.

One example might be which has a Verisign class 3 certificate - I assume a large banking-related site has a certificate that should be widely accepted.

However when I try and run:

wget -O -   #grab the homepage and send it to stdout

I get the error:

Unable to establish SSL connection.

Does this mean my system's certs, perhaps one of the cacert.pem files, is out of date?

I'm on Ubuntu 12.04.1.

Yes, I know I can use no-check-certificate but I'm more curious about why this is happening in the first place.

How can I update certificates on my system to fix wget's error: "Unable to establish SSL connection."?

share|improve this question

1 Answer 1

up vote 0 down vote accepted

Try using certutil to install a certificate.

Some examples that used to work back when Chrome did not support installation of certificates from the UI.

More usage examples and a detailed description

Hope this helps. No, I did not try it with wget myself.

share|improve this answer
looks right although i can't get it to work. – cwd Oct 2 '12 at 12:20

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.