How can I update certificates on my system to fix wget's error: "Unable to establish SSL connection."?

Question

Sometimes I notice that I am unable to connect via SSL with curl and wget to websites that have certificates that should be valid.

One example might be https://squareup.com/ which has a Verisign class 3 certificate - I assume a large banking-related site has a certificate that should be widely accepted.

However when I try and run:

wget -O - https://squareup.com/   #grab the homepage and send it to stdout

I get the error:

Unable to establish SSL connection.

Does this mean my system's certs, perhaps one of the cacert.pem files, is out of date?

I'm on Ubuntu 12.04.1.

Yes, I know I can use no-check-certificate but I'm more curious about why this is happening in the first place.

How can I update certificates on my system to fix wget's error: "Unable to establish SSL connection."?

Solution

Try using certutil to install a certificate.

Some examples that used to work back when Chrome did not support installation of certificates from the UI.

More usage examples and a detailed description

Comments

[cwd]

looks right although i can't get it to work.