How do I set GIT_SSL_NO_VERIFY for specific repos only?

You can do git config http.sslVerify “false” in your specific repo to disable SSL certificate checking for that repo only. This won’t work with git clone, since you don’t yet have the local git repo to be able to set the flag in yet. Therefore in that case: git -c http.sslVerify=false clone <path> cd <directory> … Read more

How to create an HTTPS server in Node.js?

The Express API doc spells this out pretty clearly. Additionally this answer gives the steps to create a self-signed certificate. I have added some comments and a snippet from the Node.js HTTPS documentation: var express = require(‘express’); var https = require(‘https’); var http = require(‘http’); var fs = require(‘fs’); // This line is from the … Read more

SSL certificate rejected trying to access GitHub over HTTPS behind firewall

The problem is that you do not have any of Certification Authority certificates installed on your system. And these certs cannot be installed with cygwin’s setup.exe. Update: Install Net/ca-certificates package in cygwin (thanks dirkjot) There are two solutions: Actually install root certificates. Curl guys extracted for you certificates from Mozilla. cacert.pem file is what you … Read more

urllib and “SSL: CERTIFICATE_VERIFY_FAILED” Error

This isn’t a solution to your specific problem, but I’m putting it here because this thread is the top Google result for “SSL: CERTIFICATE_VERIFY_FAILED”, and it lead me on a wild goose chase. If you have installed Python 3.6 on OSX and are getting the “SSL: CERTIFICATE_VERIFY_FAILED” error when trying to connect to an https:// … Read more

Is a HTTPS query string secure?

Yes, it is. But using GET for sensitive data is a bad idea for several reasons: Mostly HTTP referrer leakage (an external image in the target page might leak the password[1]) Password will be stored in server logs (which is obviously bad) History caches in browsers Therefore, even though Querystring is secured it’s not recommended … Read more

Trusting all certificates using HttpClient over HTTPS

You basically have four potential solutions to fix a “Not Trusted” exception on Android using httpclient: Trust all certificates. Don’t do this, unless you really know what you’re doing. Create a custom SSLSocketFactory that trusts only your certificate. This works as long as you know exactly which servers you’re going to connect to, but as … Read more

curl: (60) SSL certificate problem: unable to get local issuer certificate

Relating to ‘SSL certificate problem: unable to get local issuer certificate’ error. It is important to note that this applies to the system sending the CURL request, and NOT the server receiving the request. Download the latest cacert.pem from https://curl.se/ca/cacert.pem Add the ‘–cacert /path/to/cacert.pem’ option to the curl command to tell curl where the local … Read more

Python Requests throwing SSLError

The problem you are having is caused by an untrusted SSL certificate. Like @dirk mentioned in a previous comment, the quickest fix is setting verify=False: requests.get(‘https://example.com’, verify=False) Please note that this will cause the certificate not to be verified. This will expose your application to security risks, such as man-in-the-middle attacks. Of course, apply judgment. … Read more

Hata!: SQLSTATE[HY000] [1045] Access denied for user 'divattrend_liink'@'localhost' (using password: YES)