Sometimes I notice that I am unable to connect via SSL with curl and wget to websites that have certificates that should be valid.

One example might be https://squareup.com/ which has a Verisign class 3 certificate - I assume a large banking-related site has a certificate that should be widely accepted.

However when I try and run:

wget -O - https://squareup.com/   #grab the homepage and send it to stdout

I get the error:

Unable to establish SSL connection.

Does this mean my system's certs, perhaps one of the cacert.pem files, is out of date?

I'm on Ubuntu 12.04.1.

Yes, I know I can use no-check-certificate but I'm more curious about why this is happening in the first place.

How can I update certificates on my system to fix wget's error: "Unable to establish SSL connection."?


Try using certutil to install a certificate.

Some examples that used to work back when Chrome did not support installation of certificates from the UI.

More usage examples and a detailed description

  • looks right although i can't get it to work.
    – cwd
    Oct 2 '12 at 12:20

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.