【发布时间】：2017-01-17 00:42:14
【问题描述】：
问题
如何修复（不是解决方法）Octave（假设 libcurl 与 octave 捆绑）导致 Peer 证书无法使用给定 CA 证书进行身份验证？
阅读 pkg install from forge in windows 后，Octave 维护者似乎意识到 Octave 4.0 的问题，但似乎没有可用的修复程序。
问题
看起来 Windows 上 Octave 的 urlread 不适用于 HTTPS，因为诸如 https://octave.sourceforge.io 之类的服务器证书无法使用 urlread（似乎称为 curl）所指的受信任证书进行身份验证。
例如，share\octave\4.2.0\m\pkg\private\get_forge_pkg.m 第 64 行在尝试运行 pkg install -forge时会导致问题> 安装软件包。
## Try get the list of all packages.
[html, succ] = urlread ("http://packages.octave.org/list_packages.php");
if (! succ)
error ("get_forge_pkg: could not read URL, please verify internet connection");
endif
从命令窗口运行 urlread 会显示以下错误。
>> [html, status, msg] = urlread ("http://packages.octave.org/list_packages.php");
>> msg
msg = Peer certificate cannot be authenticated with given CA certificates
尝试通过 HTTPS 访问 google.com，结果相同。
>> [html, status, msg] = urlread ("https://google.com");
>> msg
msg = Peer certificate cannot be authenticated with given CA certificates
IE 和 Google Chrome 根证书可以验证 sourceforge 证书。
尝试过的系统如下。
#[html, succ] = urlread ("http://packages.octave.org/list_packages.php");
sURLLink="https://octave.sourceforge.io/list_packages.php"
command=['curl --insecure ','"',sURLLink,'"'];
[succ, html] = system(command)
#if (! succ)
if (succ != 0)
error ("get_forge_pkg: could not read URL, please verify internet connection");
endif
但是它导致了另一个错误。
>> pkg install -forge symbolic
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
100 559 100 559 0 0 389 0 0:00:01 0:00:01 --:--:-- 393
sURLLink = https://octave.sourceforge.io/list_packages.php
succ = 0
html = bim
bsltl
cgi
....
error: get_forge_pkg: package NAME exists, but index page not available
error: called from
get_forge_pkg at line 74 column 7
get_forge_download at line 26 column 12
pkg at line 382 column 29
相关信息
- pkg install from forge in windows
- urlread(), urlwrite() don't work for https pages in Octave for Windows
- windows libcurl - peer certificate cannot be authenticated with given ca certificates
- Getting error in Curl - Peer certificate cannot be authenticated with known CA certificates
- SSL CA Certificates - LibCurl C Language (Linux)
环境
- octave-4.2.0-w64 on Windows 7 Enterprise 64 bit Version 6.1.7601 Service Pack 1 Build 7601
- Windows 10 Pro 64 位版本 10.0.14393 Build 14393 上的 Octave 4.0.3
【问题讨论】：
标签： https ssl-certificate octave libcurl urlread