curl command from a linux system to access https://ssl-failure.thousandeyes.net results in an error

The name of the pictureThe name of the pictureThe name of the pictureClash Royale CLAN TAG#URR8PPP











up vote
0
down vote

favorite












while Using the curl command from a Linux (not a Mac) system to access https://ssl-failure.thousandeyes.net results in an error. However, opening this site in a web browser such as Chrome appears not to generate an error. how is this?










share|improve this question

















  • 1




    ssllabs.com/ssltest/analyze.html?d=ssl-failure.thousandeyes.net => "This server's certificate chain is incomplete. Grade capped to B." Browsers can sometimes complete a chain using AIA or cache, but curl -- at least builds using OpenSSL or NSS -- does not; maybe MacOS SecureTransport does. Check curl -V to confirm what it is using.
    – dave_thompson_085
    Dec 7 at 6:05















up vote
0
down vote

favorite












while Using the curl command from a Linux (not a Mac) system to access https://ssl-failure.thousandeyes.net results in an error. However, opening this site in a web browser such as Chrome appears not to generate an error. how is this?










share|improve this question

















  • 1




    ssllabs.com/ssltest/analyze.html?d=ssl-failure.thousandeyes.net => "This server's certificate chain is incomplete. Grade capped to B." Browsers can sometimes complete a chain using AIA or cache, but curl -- at least builds using OpenSSL or NSS -- does not; maybe MacOS SecureTransport does. Check curl -V to confirm what it is using.
    – dave_thompson_085
    Dec 7 at 6:05













up vote
0
down vote

favorite









up vote
0
down vote

favorite











while Using the curl command from a Linux (not a Mac) system to access https://ssl-failure.thousandeyes.net results in an error. However, opening this site in a web browser such as Chrome appears not to generate an error. how is this?










share|improve this question













while Using the curl command from a Linux (not a Mac) system to access https://ssl-failure.thousandeyes.net results in an error. However, opening this site in a web browser such as Chrome appears not to generate an error. how is this?







linux






share|improve this question













share|improve this question











share|improve this question




share|improve this question










asked Dec 7 at 5:18









Udit Ramalingegowda Manchattah

1




1







  • 1




    ssllabs.com/ssltest/analyze.html?d=ssl-failure.thousandeyes.net => "This server's certificate chain is incomplete. Grade capped to B." Browsers can sometimes complete a chain using AIA or cache, but curl -- at least builds using OpenSSL or NSS -- does not; maybe MacOS SecureTransport does. Check curl -V to confirm what it is using.
    – dave_thompson_085
    Dec 7 at 6:05













  • 1




    ssllabs.com/ssltest/analyze.html?d=ssl-failure.thousandeyes.net => "This server's certificate chain is incomplete. Grade capped to B." Browsers can sometimes complete a chain using AIA or cache, but curl -- at least builds using OpenSSL or NSS -- does not; maybe MacOS SecureTransport does. Check curl -V to confirm what it is using.
    – dave_thompson_085
    Dec 7 at 6:05








1




1




ssllabs.com/ssltest/analyze.html?d=ssl-failure.thousandeyes.net => "This server's certificate chain is incomplete. Grade capped to B." Browsers can sometimes complete a chain using AIA or cache, but curl -- at least builds using OpenSSL or NSS -- does not; maybe MacOS SecureTransport does. Check curl -V to confirm what it is using.
– dave_thompson_085
Dec 7 at 6:05





ssllabs.com/ssltest/analyze.html?d=ssl-failure.thousandeyes.net => "This server's certificate chain is incomplete. Grade capped to B." Browsers can sometimes complete a chain using AIA or cache, but curl -- at least builds using OpenSSL or NSS -- does not; maybe MacOS SecureTransport does. Check curl -V to confirm what it is using.
– dave_thompson_085
Dec 7 at 6:05











1 Answer
1






active

oldest

votes

















up vote
0
down vote













From man:




 -k/--insecure
(SSL) This option explicitly allows curl to perform "insecure" SSL connections and transfers. All SSL connections are attempted to be made secure by using
the CA certificate bundle installed by default. This makes all connections considered "insecure" fail unless -k/--insecure is used.



You are trying to access a secure(SSL) site use -k option to allows curl to perform "insecure" SSL connections and transfers.



curl -k 'https://ssl-failure.thousandeyes.net/'

<html>
<head>
<title>Welcome to ssl-failure.thousandeyes.net</title>
</head>
<body>
<p>Welcome to ssl-failure.thousandeyes.net. Congratulations, you're reading the secure page</p>
</body>
</html>





share|improve this answer




















    Your Answer








    StackExchange.ready(function()
    var channelOptions =
    tags: "".split(" "),
    id: "106"
    ;
    initTagRenderer("".split(" "), "".split(" "), channelOptions);

    StackExchange.using("externalEditor", function()
    // Have to fire editor after snippets, if snippets enabled
    if (StackExchange.settings.snippets.snippetsEnabled)
    StackExchange.using("snippets", function()
    createEditor();
    );

    else
    createEditor();

    );

    function createEditor()
    StackExchange.prepareEditor(
    heartbeatType: 'answer',
    convertImagesToLinks: false,
    noModals: true,
    showLowRepImageUploadWarning: true,
    reputationToPostImages: null,
    bindNavPrevention: true,
    postfix: "",
    imageUploader:
    brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
    contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
    allowUrls: true
    ,
    onDemand: true,
    discardSelector: ".discard-answer"
    ,immediatelyShowMarkdownHelp:true
    );



    );













    draft saved

    draft discarded


















    StackExchange.ready(
    function ()
    StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f486502%2fcurl-command-from-a-linux-system-to-access-https-ssl-failure-thousandeyes-net%23new-answer', 'question_page');

    );

    Post as a guest















    Required, but never shown

























    1 Answer
    1






    active

    oldest

    votes








    1 Answer
    1






    active

    oldest

    votes









    active

    oldest

    votes






    active

    oldest

    votes








    up vote
    0
    down vote













    From man:




     -k/--insecure
    (SSL) This option explicitly allows curl to perform "insecure" SSL connections and transfers. All SSL connections are attempted to be made secure by using
    the CA certificate bundle installed by default. This makes all connections considered "insecure" fail unless -k/--insecure is used.



    You are trying to access a secure(SSL) site use -k option to allows curl to perform "insecure" SSL connections and transfers.



    curl -k 'https://ssl-failure.thousandeyes.net/'

    <html>
    <head>
    <title>Welcome to ssl-failure.thousandeyes.net</title>
    </head>
    <body>
    <p>Welcome to ssl-failure.thousandeyes.net. Congratulations, you're reading the secure page</p>
    </body>
    </html>





    share|improve this answer
























      up vote
      0
      down vote













      From man:




       -k/--insecure
      (SSL) This option explicitly allows curl to perform "insecure" SSL connections and transfers. All SSL connections are attempted to be made secure by using
      the CA certificate bundle installed by default. This makes all connections considered "insecure" fail unless -k/--insecure is used.



      You are trying to access a secure(SSL) site use -k option to allows curl to perform "insecure" SSL connections and transfers.



      curl -k 'https://ssl-failure.thousandeyes.net/'

      <html>
      <head>
      <title>Welcome to ssl-failure.thousandeyes.net</title>
      </head>
      <body>
      <p>Welcome to ssl-failure.thousandeyes.net. Congratulations, you're reading the secure page</p>
      </body>
      </html>





      share|improve this answer






















        up vote
        0
        down vote










        up vote
        0
        down vote









        From man:




         -k/--insecure
        (SSL) This option explicitly allows curl to perform "insecure" SSL connections and transfers. All SSL connections are attempted to be made secure by using
        the CA certificate bundle installed by default. This makes all connections considered "insecure" fail unless -k/--insecure is used.



        You are trying to access a secure(SSL) site use -k option to allows curl to perform "insecure" SSL connections and transfers.



        curl -k 'https://ssl-failure.thousandeyes.net/'

        <html>
        <head>
        <title>Welcome to ssl-failure.thousandeyes.net</title>
        </head>
        <body>
        <p>Welcome to ssl-failure.thousandeyes.net. Congratulations, you're reading the secure page</p>
        </body>
        </html>





        share|improve this answer












        From man:




         -k/--insecure
        (SSL) This option explicitly allows curl to perform "insecure" SSL connections and transfers. All SSL connections are attempted to be made secure by using
        the CA certificate bundle installed by default. This makes all connections considered "insecure" fail unless -k/--insecure is used.



        You are trying to access a secure(SSL) site use -k option to allows curl to perform "insecure" SSL connections and transfers.



        curl -k 'https://ssl-failure.thousandeyes.net/'

        <html>
        <head>
        <title>Welcome to ssl-failure.thousandeyes.net</title>
        </head>
        <body>
        <p>Welcome to ssl-failure.thousandeyes.net. Congratulations, you're reading the secure page</p>
        </body>
        </html>






        share|improve this answer












        share|improve this answer



        share|improve this answer










        answered Dec 7 at 6:02









        msp9011

        3,65543863




        3,65543863



























            draft saved

            draft discarded
















































            Thanks for contributing an answer to Unix & Linux Stack Exchange!


            • Please be sure to answer the question. Provide details and share your research!

            But avoid


            • Asking for help, clarification, or responding to other answers.

            • Making statements based on opinion; back them up with references or personal experience.

            To learn more, see our tips on writing great answers.





            Some of your past answers have not been well-received, and you're in danger of being blocked from answering.


            Please pay close attention to the following guidance:


            • Please be sure to answer the question. Provide details and share your research!

            But avoid


            • Asking for help, clarification, or responding to other answers.

            • Making statements based on opinion; back them up with references or personal experience.

            To learn more, see our tips on writing great answers.




            draft saved


            draft discarded














            StackExchange.ready(
            function ()
            StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f486502%2fcurl-command-from-a-linux-system-to-access-https-ssl-failure-thousandeyes-net%23new-answer', 'question_page');

            );

            Post as a guest















            Required, but never shown





















































            Required, but never shown














            Required, but never shown












            Required, but never shown







            Required, but never shown

































            Required, but never shown














            Required, but never shown












            Required, but never shown







            Required, but never shown






            Popular posts from this blog

            How to check contact read email or not when send email to Individual?

            Bahrain

            Postfix configuration issue with fips on centos 7; mailgun relay