Got problems SSL on CENTOS6.5

[nda888]

Hi everyone

Im having some problems about ssl ca-certificates on CENTOS6.5

When I donwload a file from

wget https://bitbucket.org/nikratio/s3ql/dow ... 18.tar.bz2

It got issue below:

--2015-07-04 22:41:25-- https://bitbucket.org/nikratio/s3ql/dow ... 18.tar.bz2
Resolving bitbucket.org... 131.103.20.168, 131.103.20.167
Connecting to bitbucket.org|131.103.20.168|:443... connected.
HTTP request sent, awaiting response... 302 FOUND
Location: https://bbuseruploads.s3.amazonaws.com/ ... tar.bz2%22 [following]
--2015-07-04 22:41:26-- https://bbuseruploads.s3.amazonaws.com/ ... tar.bz2%22
Resolving bbuseruploads.s3.amazonaws.com... 54.231.244.9
Connecting to bbuseruploads.s3.amazonaws.com|54.231.244.9|:443... connected.
ERROR: cannot verify bbuseruploads.s3.amazonaws.comâs certificate, issued by â/C=US/O=VeriSign, Inc./OU=VeriSign Trust Network/OU=Terms of use at https://www.verisign.com/rpa (c)10/CN=VeriSign Class 3 Secure Server CA - G3
Unable to locally verify the issuerâs authority.
To connect to bbuseruploads.s3.amazonaws.com insecurely, use â--no-check-certificate.

--- I tried yum update ca-certificates
rpm -V ca-certificates --->> everything well no show anything

And a lot of solution from Google, but still got issue above

Even I copy a file ca-certificates from another machine COS65 work well to my server but no luck

Please help me
How should I do to resolve this problem?

Thanks so much

[TrevorH]

You need to update to 6.6 which is already more than 8 months old. 6.5 has been unsupported and deprecated since the release of 6.6 in November last year. You are missing critical security fixes and updates. You may also find that newer certificates are now available.

[nda888]

Thanks TrevorH

May be i missing certificates 'VeriSign Class 3 Secure Server CA - G3'

How could i find this and newer CA?

Can you help me without upgrade to COS66

Thanks

[TrevorH]

If there is a solution to your problem then it will be yum update

[TrevorH]

I have just verified that I can download that file on 6.6 and it works without error.

Please take the time to read the Redhat errata pages https://rhn.redhat.com/errata/rhel-server-6-errata.html to get a list of the things that have been fixed since 6.5 was released on 21 November 2013. That's coming on for 2 years old now and is severely out of date and contains numerous high severity security vulnerabilities. You need to update.