curl: (60) Peer 的证书颁发者已被用户标记为不信任答案

【问题标题】：curl: (60) Peer's certificate issuer has been marked as not trusted by the usercurl: (60) Peer 的证书颁发者已被用户标记为不信任
【发布时间】：2013-10-15 09:07:50
【问题描述】：

curl -L https://get.rvm.io | bash -s stable --ruby

当我尝试这个时，我得到了这个，我认为我的 openssl 坏了，

% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0
curl: (60) Peer's certificate issuer has been marked as not trusted by the user.
More details here: http://curl.haxx.se/docs/sslcerts.html

curl performs SSL certificate verification by default, using a "bundle"
of Certificate Authority (CA) public keys (CA certs). If the default
bundle file isn't adequate, you can specify an alternate file
using the --cacert option.
If this HTTPS server uses a certificate signed by a CA represented in
the bundle, the certificate verification probably failed due to a
problem with the certificate (it might be expired, or the name might
not match the domain name in the URL).
If you'd like to turn off curl's verification of the certificate, use
the -k (or --insecure) option.

我使用 -k ，但总是出错，我按照这种方式https://serverfault.com/questions/437546/centos-openldap-cert-trust-issues 但是又报错了，怎么解决？

【问题讨论】：

标签： curl ssl

【解决方案1】：

我这里是 CentOS7 pyspider，运行 pyspider 显示错误

Exception HTTP 599 Peer's certificate issuer has been marked as not trusted by the user

并使用以下步骤修复它：

pip3 uninstall pycurl
export PYCURL_SSL_LIBRARY=nss
export LDFLAGS=-L/usr/local/opt/openssl/lib;export CPPFLAGS=-I/usr/local/opt/openssl/include;pip install pycurl --compile --no-cache-dir

详细说明

【讨论】：