SSL certificate problem

General
1

FROM balenalib/rpi-raspbian:latest
RUN curl -o- https://raw.githubusercontent.com/nvm-sh/nvm/v0.38.0/install.sh | bash
curl: (60) SSL certificate problem: unable to get local issuer certificate

I think balenalib/rpi-raspbian:latest has some problems whit ca-certificates since I have to add these to get it working:

RUN curl -k -o /tmp/cacert.crt https://curl.haxx.se/ca/cacert.pem
&& mv /tmp/cacert.crt /usr/local/share/ca-certificates/cacert.crt
&& update-ca-certificates

7

Hello,
Just to test can you try adding another step that updates the ca-certificates. This worked for me.

FROM balenalib/rpi-raspbian:latest
RUN update-ca-certificates -f
RUN curl -o- https://raw.githubusercontent.com/nvm-sh/nvm/v0.38.0/install.sh | bash
8

Let us know if it works for you as well.

12

Yes it works. But why is it necessary though? Maybe update your image so it´s not necessary?
Thanks

13

I would guess that decision was made for security reasons, but I’m not sure…I will ping the os team and see if they have a better explanation.

1 Like
21

Hi,

Just want to let you know that our images are fixed now, we use debootstrap to create the base images and they are weekly rebuilt so it’s probably something wrong with the default certs in raspbian repositories, however we added an extra step to update the certs so this won’t happen again.

Please let us know if you need further support.

1 Like