Unix & Linux Stack Exchange is a question and answer site for users of Linux, FreeBSD and other Un*x-like operating systems. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Sometimes I notice that I am unable to connect via SSL with curl and wget to websites that have certificates that should be valid.

One example might be https://squareup.com/ which has a Verisign class 3 certificate - I assume a large banking-related site has a certificate that should be widely accepted.

However when I try and run:

wget -O - https://squareup.com/   #grab the homepage and send it to stdout

I get the error:

Unable to establish SSL connection.

Does this mean my system's certs, perhaps one of the cacert.pem files, is out of date?

I'm on Ubuntu 12.04.1.

Yes, I know I can use no-check-certificate but I'm more curious about why this is happening in the first place.

How can I update certificates on my system to fix wget's error: "Unable to establish SSL connection."?

share|improve this question
up vote 1 down vote accepted

Try using certutil to install a certificate.

Some examples that used to work back when Chrome did not support installation of certificates from the UI.

More usage examples and a detailed description

Hope this helps. No, I did not try it with wget myself.

share|improve this answer
looks right although i can't get it to work. – cwd Oct 2 '12 at 12:20

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.