Skip to content
View in the app

A better way to browse. Learn more.

Unraid

A full-screen app on your home screen with push notifications, badges and more.

To install this app on iOS and iPadOS
  1. Tap the Share icon in Safari
  2. Scroll the menu and tap Add to Home Screen.
  3. Tap Add in the top-right corner.
To install this app on Android
  1. Tap the 3-dot menu (⋮) in the top-right corner of the browser.
  2. Tap Add to Home screen or Install app.
  3. Confirm by tapping Install.

raw.githubusercontent.com SSL Verification Errors

Featured Replies

Hi all,

 

New Unraid user here, currently on the Trial version but I can't get anything to connect to or install from a https:// raw.githubusercontent.com/* website with an SSL verification error.

Date / time is correct, DNS is static and DNS addresses resolvable, internet access validated etc.

Can anyone help please?

If I attempt a wget against, say https://raw.githubusercontent.com/Squidly271/community.applications/master/plugins/community.applications.plg

I get:

root@Tower:/boot/config/plugins# wget https://raw.githubusercontent.com/Squidly271/community.applications/master/plugins/community.applications.plg
--2024-05-10 15:51:52-- https://raw.githubusercontent.com/Squidly271/community.applications/master/plugins/community.applications.plg
Resolving raw.githubusercontent.com (raw.githubusercontent.com)... 18.197.126.33, 2a05:d014:74e:e401:df21:4b60:140d:65fc
Connecting to raw.githubusercontent.com (raw.githubusercontent.com)|18.197.126.33|:443... connected.
ERROR: no certificate subject alternative name matches
        requested host name ‘raw.githubusercontent.com’.
To connect to raw.githubusercontent.com insecurely, use `--no-check-certificate'.

If I add the --no-check-certificate switch a file downloads but when you cat it, it has no content:
 

root@Tower:/boot/config/plugins# wget https://raw.githubusercontent.com/Squidly271/community.applications/master/plugins/community.applications.plg --no-check-certificate 
--2024-05-10 15:52:10-- https://raw.githubusercontent.com/Squidly271/community.applications/master/plugins/community.applications.plg
Resolving raw.githubusercontent.com (raw.githubusercontent.com)... 18.197.126.33, 2a05:d014:74e:e401:df21:4b60:140d:65fc
Connecting to raw.githubusercontent.com (raw.githubusercontent.com)|18.197.126.33|:443... connected.
WARNING: no certificate subject alternative name matches
        requested host name ‘raw.githubusercontent.com’.
HTTP request sent, awaiting response... 200 OK
Length: 1531 (1.5K) [text/html]
Saving to: ‘community.applications.plg’

community.applications.plg                                       100%[=======================================================================================================================================================>]   1.50K  --.-KB/s    in 0s      

2024-05-10 15:52:10 (280 MB/s) - ‘community.applications.plg’ saved [1531/1531]

 

root@Tower:/boot/config/plugins# cat community.applications.plg
<!DOCTYPE html>
<html>
    <head>
        <link href="/img/favicon.png" rel="shortcut icon"/>
        <title> SAM Safe Browsing - This page is blocked </title>
        <meta charset="utf-8"/>
        <meta content="width=device-width, initial-scale=1.0, maximum-scale=1.0" name="viewport"/>
        <link href="/css/styles.css" rel="stylesheet" type="text/css"/>
        <link rel="stylesheet" href="https://maxcdn.bootstrapcdn.com/bootstrap/3.4.0/css/bootstrap.min.css">
        <!-- Scripts -->
        <script src="/js/jquery.min.js"></script>
        <!-- End of Scripts -->
    </head>
    <body>
        <div class="header">
            <div class="header-image-container">
                <h2 id="headline" class="headline">
                    This page is blocked.
                </h2>
            </div>
        </div>

        <script>
            $(document).ready(function () {
                var match = document.cookie.split('; ').find(row => row.toString('Sam-Cookie')).split('=')[1].split('::')[0];

                var reportedUrl = window.location.host;
                reportedUrl = reportedUrl.replace(/^(www\.)/, "");

                var domain=''
                $.getJSON('/params', function(data) {
                    domain = data["text"]
                    window.location.replace(location.protocol + '//' + domain + '/landing_bypass.html?domain=$domain&token=$token'.replace('$domain', reportedUrl).replace('$token', match));
                })
            })
        </script>
    </body>
</html>

I would try deleting the contents of /config/ssl and /config/ssh on the flash drive, reboot and try again

  • Author

Thanks for the response @Squid, I have just removed the entire contents from both directories but get the exact same error:

root@Tower:~# wget https://raw.githubusercontent.com/Squidly271/community.applications/master/plugins/community.applications.plg
--2024-05-12 09:46:17-- https://raw.githubusercontent.com/Squidly271/community.applications/master/plugins/community.applications.plg
Resolving raw.githubusercontent.com (raw.githubusercontent.com)... 18.197.126.33, 2a05:d014:74e:e403:ed55:2f4b:ee3a:3a3f
Connecting to raw.githubusercontent.com (raw.githubusercontent.com)|18.197.126.33|:443... connected.
ERROR: no certificate subject alternative name matches
        requested host name ‘raw.githubusercontent.com’.
To connect to raw.githubusercontent.com insecurely, use `--no-check-certificate'.


Does anyone know of a way of trying to get Unraid to bypass any SSL verification checks against https://raw.githubusercontent.com/* ?

Something in your setup is borked. If you would have taken the time to check the IP Adress, you would have noticed the reason for your issue. That IP was used for malicious actions and has a virgin media info on it. It doesnt lead to githubusercontent. Most likely your dns got fiddled with.


Also, the ips belong to amazon, which is odd, considering Github ips have a proper lookup on themselves with "GitHub, Inc."

Edited by Mainfrezzer

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Guest
Reply to this topic...

Account

Navigation

Search

Search

Configure browser push notifications

Chrome (Android)
  1. Tap the lock icon next to the address bar.
  2. Tap Permissions → Notifications.
  3. Adjust your preference.
Chrome (Desktop)
  1. Click the padlock icon in the address bar.
  2. Select Site settings.
  3. Find Notifications and adjust your preference.