NRDS - ERROR: cannot verify xxx certificate

Problem Description

When executing the following command to download the NRDS client (your command will be slightly different):

wget -O centos13.tar.gz "https://xi-c6x-x64/nrdp/?cmd=nrdsgetclient&token=qaka590hebbv&configname=centos13"

You receive the following error message:

--2016-08-09 10:43:09--  https://xi-c6x-x64/nrdp/?cmd=nrdsgetclient&token=qaka590hebbv&configname=centos13
Resolving xi-c6x-x64... 10.25.5.12
Connecting to xi-c6x-x64|10.25.5.12|:443... connected.
ERROR: cannot verify xi-c6x-x64’s certificate, issued by “/C=AU/ST=NSW/L=Deniliquin/O=Box293 Pty Ltd/OU=IT/CN=xi-c6x-x64”:
  Self-signed certificate encountered.
To connect to xi-c6x-x64 insecurely, use ‘--no-check-certificate’.

Resolution

The reason for the problem is that the NRDS server is using a self-signed SSL certificate and the client machine cannot verify the certificate's authenticity.

The resolution is to execute the command again using the --no-check-certificate argument:

wget -O centos13.tar.gz "https://xi-c6x-x64/nrdp/?cmd=nrdsgetclient&token=qaka590hebbv&configname=centos13" --no-check-certificate

This time the command will work:

--2016-08-09 10:43:20--  https://xi-c6x-x64/nrdp/?cmd=nrdsgetclient&token=qaka590hebbv&configname=centos13
Resolving xi-c6x-x64... 10.25.5.12
Connecting to xi-c6x-x64|10.25.5.12|:443... connected.
WARNING: cannot verify xi-c6x-x64’s certificate, issued by “/C=AU/ST=NSW/L=Deniliquin/O=Box293 Pty Ltd/OU=IT/CN=xi-c6x-x64”:
  Self-signed certificate encountered.
HTTP request sent, awaiting response... 200 OK
Length: 15362 (15K) [application/octet-stream]
Saving to: “centos13.tar.gz”

100%[===========================================================================>] 15,362      --.-K/s   in 0s      

2016-08-09 10:43:21 (60.2 MB/s) - “centos13.tar.gz” saved [15362/15362]

You can proceed with the remaining steps to install the NRDS client.

The NRDS client itself will not have an issue with the self-signed certificate, the problem only occurs when downloading the installer tarball using the wget command.

Final Thoughts

For any support related questions please visit the Nagios Support Forums at:

http://support.nagios.com/forum/