WGET Certificate Issues

Hi,

I have a newly installed OSMC installation. When I try to run the following command
wget -N https://raw.githubusercontent.com/tvdzwan/hyperion/master/bin/install_hyperion.sh I get a fatal TLS error which can be seen below:

osmc@osmc:~$ wget -N https://raw.githubusercontent.com/tvdzwan/hyperion/master/bin/install_hyperion.sh
converted ‘https://raw.githubusercontent.com/tvdzwan/hyperion/master/bin/install_hyperion.sh’ (ANSI_X3.4-1968) → ‘https://raw.githubusercontent.com/tvdzwan/hyperion/master/bin/install_hyperion.sh’ (UTF-8)
–2016-03-11 10:32:09-- https://raw.githubusercontent.com/tvdzwan/hyperion/master/bin/install_hyperion.sh
Resolving raw.githubusercontent.com (raw.githubusercontent.com)… 62.252.172.241
Connecting to raw.githubusercontent.com (raw.githubusercontent.com)|62.252.172.241|:443… connected.
GnuTLS: A TLS fatal alert has been received.
GnuTLS: received alert [0]: Close notify
Unable to establish SSL connection.
osmc@osmc:~$ wget -O - https://raw.githubusercontent.com/saltstack/salt-bootstrap/stable/bootstrap-salt.sh
converted ‘https://raw.githubusercontent.com/saltstack/salt-bootstrap/stable/bootstrap-salt.sh’ (ANSI_X3.4-1968) → ‘https://raw.githubusercontent.com/saltstack/salt-bootstrap/stable/bootstrap-salt.sh’ (UTF-8)
–2016-03-11 10:33:15-- https://raw.githubusercontent.com/saltstack/salt-bootstrap/stable/bootstrap-salt.sh
Resolving raw.githubusercontent.com (raw.githubusercontent.com)… 62.252.172.241
Connecting to raw.githubusercontent.com (raw.githubusercontent.com)|62.252.172.241|:443… connected.
GnuTLS: A TLS fatal alert has been received.
GnuTLS: received alert [0]: Close notify
Unable to establish SSL connection.

I have no idea why this is happening, CA certificates is installed. This is also happening on one of my other Pi’s which is running raspbian. Any idea what is going on? This is a brand new installaltion of OSMC.

EDIT; It even seems to be failing with --no-check-certificate on wget.

osmc@osmc:~/test$ wget --no-check-certificate https://raw.githubusercontent.com/tvdzwan/hyperion/master/bin/install_hyperion.sh
converted ‘https://raw.githubusercontent.com/tvdzwan/hyperion/master/bin/install_hyperion.sh’ (ANSI_X3.4-1968) → ‘https://raw.githubusercontent.com/tvdzwan/hyperion/master/bin/install_hyperion.sh’ (UTF-8)
–2016-03-11 10:55:20-- https://raw.githubusercontent.com/tvdzwan/hyperion/master/bin/install_hyperion.sh
Resolving raw.githubusercontent.com (raw.githubusercontent.com)… 62.252.172.241
Connecting to raw.githubusercontent.com (raw.githubusercontent.com)|62.252.172.241|:443… connected.
GnuTLS: A TLS fatal alert has been received.
GnuTLS: received alert [0]: Close notify
Unable to establish SSL connection.
osmc@osmc:~/test$

Thanks,
Chay

This would appear to be an occasional problem with githubusercontent.com; E.g., see here on the “RPi” forums.

Hi, Thank you for the info I did infact see this post. It suggested you wait 6-12 hours and try again.

I was trying to get this installed last night so 12 hours has passed. Not sure why it is happening. Do you get the error if you try to WGET from github?

Thanks,
Chay

Not exactly (I just did it on a different OS) but pretty similar:

Gateway 9:03 tehm 571 % mkdir foo
Gateway 12:05 tehm 572 % cd foo
Gateway 12:05 foo 573 % wget -N https://raw.githubusercontent.com/tvdzwan/hyperion/master/bin/install_hyperion.sh
–2016-03-11 12:05:39-- https://raw.githubusercontent.com/tvdzwan/hyperion/master/bin/install_hyperion.sh
Resolving raw.githubusercontent.com (raw.githubusercontent.com)… 185.31.18.133
Connecting to raw.githubusercontent.com (raw.githubusercontent.com)|185.31.18.133|:443… connected.
ERROR: certificate common name www.github.com' doesn't match requested host name raw.githubusercontent.com’.
To connect to raw.githubusercontent.com insecurely, use `–no-check-certificate’.
Gateway 12:05 foo 574 %

So, as you guessed, it looks as though they’ve messed up their certificates.
Best leave it until they’ve sorted themselves out - I’m sure they will :slightly_smiling:

Hi,

Thanks, I needed a second opinion on the matter as to my knowledge everything is set up correctly on my pi and network.
As you also having a bit of trouble it’s got to mean something is wrong with GitHub’s certs.

I have contacted their support team so hopefully they will fix the issue soon. I’ll update this thread once fixed!

Cheers!

1 Like

Welcome! :slightly_smiling:

BTW, if you’re desperate, you could always just go to GitHub and download the source bundle directly - saves any pangs of impatience :slightly_smiling:

Yeah I did think to do that but I noticed inside the install script there are more references to wget from GitHub which would end up failing also.
Probably going to be easier for me to wait until they have updated their certs instead of manually downloading each of the dependencies in the script, hopefully its not too long!

Ahhhhhhh …

Well, if the author has done things like that then yes, I’m afraid you’re best being stuck waiting :frowning:

As you say, hopefully it won’t be too long! :slightly_smiling:

Actually it is working for me, have you tried again?
But maybe also just a CDN issue.

Hi Fzinken,

I just tested this again and I got the same error message as before. Hmm that is odd that’s its working for you then.

I know not helping but just to show

osmc@osmc.my.hk:~$ wget -N https://raw.githubusercontent.com/tvdzwan/hyperion/master/bin/install_hyperion.sh
--2016-03-12 00:10:34--  https://raw.githubusercontent.com/tvdzwan/hyperion/master/bin/install_hyperion.sh
Resolving raw.githubusercontent.com (raw.githubusercontent.com)... 103.245.222.133
Connecting to raw.githubusercontent.com (raw.githubusercontent.com)|103.245.222.133|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 4106 (4.0K) [text/plain]
Saving to: ‘install_hyperion.sh’

install_hyperion.sh      100%[====================================>]   4.01K  --.-KB/s   in 0s     

Last-modified header missing -- time-stamps turned off.
2016-03-12 00:10:36 (19.9 MB/s) - ‘install_hyperion.sh’ saved [4106/4106]

Hmmm, I’m stumped.

Only think I can think of is what you said earlier. The CDN must be at fault. I can see the IP it’s downloading from for you is 103.245.222.133. When I try to connect it is directing me to 62.252.172.24.

Makes me think maybe the server me and @THEM is connecting to is at fault as he is getting a certificate error also.

ERROR: certificate common name www.github.com’ doesn’t match requested hostname raw.githubusercontent.com’.

1 Like

If you are eager just add 103.245.222.133 raw.githubusercontent.com to /etc/hosts

Your a star! It must be an error with one of their servers as I have added the IP to hosts and it’s allowing me to download stuff from them again!

Hopefully they fix the original issue…
For anyone who is getting the same error messages as me please add 103.245.222.133 raw.githubusercontent.com to your hosts file!

Thanks mate!