NRDS - ERROR: cannot verify xxx certificate


Problem Description

When executing the following command to download the NRDS client (your command will be slightly different):

wget -O centos13.tar.gz "https://xi-c6x-x64/nrdp/?cmd=nrdsgetclient&token=qaka590hebbv&configname=centos13"

 

You receive the following error message:

--2016-08-09 10:43:09--  https://xi-c6x-x64/nrdp/?cmd=nrdsgetclient&token=qaka590hebbv&configname=centos13
Resolving xi-c6x-x64... 10.25.5.12
Connecting to xi-c6x-x64|10.25.5.12|:443... connected.
ERROR: cannot verify xi-c6x-x64’s certificate, issued by “/C=AU/ST=NSW/L=Deniliquin/O=Box293 Pty Ltd/OU=IT/CN=xi-c6x-x64”:
  Self-signed certificate encountered.
To connect to xi-c6x-x64 insecurely, use ‘--no-check-certificate’.

 
 

Resolution

The reason for the problem is that the NRDS server is using a self-signed SSL certificate and the client machine cannot verify the certificate's authenticity.

The resolution is to execute the command again using the --no-check-certificate argument:

wget -O centos13.tar.gz "https://xi-c6x-x64/nrdp/?cmd=nrdsgetclient&token=qaka590hebbv&configname=centos13" --no-check-certificate 

 

This time the command will work:

--2016-08-09 10:43:20--  https://xi-c6x-x64/nrdp/?cmd=nrdsgetclient&token=qaka590hebbv&configname=centos13
Resolving xi-c6x-x64... 10.25.5.12
Connecting to xi-c6x-x64|10.25.5.12|:443... connected.
WARNING: cannot verify xi-c6x-x64’s certificate, issued by “/C=AU/ST=NSW/L=Deniliquin/O=Box293 Pty Ltd/OU=IT/CN=xi-c6x-x64”:
  Self-signed certificate encountered.
HTTP request sent, awaiting response... 200 OK
Length: 15362 (15K) [application/octet-stream]
Saving to: “centos13.tar.gz”

100%[===========================================================================>] 15,362      --.-K/s   in 0s      

2016-08-09 10:43:21 (60.2 MB/s) - “centos13.tar.gz” saved [15362/15362]

 

You can proceed with the remaining steps to install the NRDS client.

 

The NRDS client itself will not have an issue with the self-signed certificate, the problem only occurs when downloading the installer tarball using the wget command.

 

 

Final Thoughts

For any support related questions please visit the Nagios Support Forums at:

http://support.nagios.com/forum/



Article ID: 537
Created On: Mon, Aug 8, 2016 at 8:59 PM
Last Updated On: Mon, Aug 8, 2016 at 9:04 PM
Authored by: tlea

Online URL: https://support.nagios.com/kb/article/nrds-error-cannot-verify-xxx-certificate-537.html