getnonfreefonts: tug.org certificate errors

[Tom Kacvinsky]

Reinhard,

I see the same problem with getnonfreefonts on my MacBook Pro

athena:Desktop tjk$ sudo getnonfreefonts --sys

--2021-11-06 18:02:32--
https://www.tug.org/~kotucha/getnonfreefonts/getfont.pl

Resolving www.tug.org (www.tug.org)... 94.23.251.76

Connecting to www.tug.org (www.tug.org)|94.23.251.76|:443... connected.

ERROR: cannot verify www.tug.org's certificate, issued by ‘CN=R3,O=Let's
Encrypt,C=US’:

  Issued certificate has expired.

To connect to www.tug.org insecurely, use `--no-check-certificate'.

! Error: Can't execute wget.



I did some research and found this


https://www.openssl.org/blog/blog/2021/09/13/LetsEncryptRootCertExpire/


So I _suspect_ the version of wget in use uses an older version of OpenSSL.

Perhaps wget might be using GnuTLS, but I am not sure of the Let's Encrypt

certificates will have a problem with GnuTLS.


In the meantime, I am going to build the most current wget with the most

current OpenSSL 1.1.1 and see how I fare.


Tom

On Sat, Nov 6, 2021 at 5:50 PM Reinhard Kotucha <reinhard.kotucha at web.de>
wrote:

> Hi,
> David (who is in the CC) reported a problem with getnonfreefonts:
>
>  | Resolving www.tug.org... 94.23.251.76
>  | Connecting to www.tug.org|94.23.251.76|:443... connected.
>  | ERROR: The certificate of 'www.tug.org' is not trusted.
>  | ERROR: The certificate of 'www.tug.org' has expired.
>  | ! Error: Can't execute wget.
>
> I can't reproduce the problem and when I examine the certificates
> within Firefox I see that they're all up-to-date.
>
> Can anybody explain how this can happen and how the problem can be
> solved?
>
> Regards,
>   Reinhard
>
> --
> ------------------------------------------------------------------
> Reinhard Kotucha                            Phone: +49-511-3373112
> Marschnerstr. 25
> D-30167 Hannover                    mailto:reinhard.kotucha at web.de
> ------------------------------------------------------------------
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://tug.org/pipermail/tex-live/attachments/20211106/3a7448d2/attachment.html>