Jump to content

raw.githubusercontent.com SSL Verification Errors


Recommended Posts

Hi all,

 

New Unraid user here, currently on the Trial version but I can't get anything to connect to or install from a https:// raw.githubusercontent.com/* website with an SSL verification error.

Date / time is correct, DNS is static and DNS addresses resolvable, internet access validated etc.

Can anyone help please?

If I attempt a wget against, say https://raw.githubusercontent.com/Squidly271/community.applications/master/plugins/community.applications.plg

I get:

root@Tower:/boot/config/plugins# wget https://raw.githubusercontent.com/Squidly271/community.applications/master/plugins/community.applications.plg
--2024-05-10 15:51:52-- https://raw.githubusercontent.com/Squidly271/community.applications/master/plugins/community.applications.plg
Resolving raw.githubusercontent.com (raw.githubusercontent.com)... 18.197.126.33, 2a05:d014:74e:e401:df21:4b60:140d:65fc
Connecting to raw.githubusercontent.com (raw.githubusercontent.com)|18.197.126.33|:443... connected.
ERROR: no certificate subject alternative name matches
        requested host name ‘raw.githubusercontent.com’.
To connect to raw.githubusercontent.com insecurely, use `--no-check-certificate'.

If I add the --no-check-certificate switch a file downloads but when you cat it, it has no content:
 

root@Tower:/boot/config/plugins# wget https://raw.githubusercontent.com/Squidly271/community.applications/master/plugins/community.applications.plg --no-check-certificate 
--2024-05-10 15:52:10-- https://raw.githubusercontent.com/Squidly271/community.applications/master/plugins/community.applications.plg
Resolving raw.githubusercontent.com (raw.githubusercontent.com)... 18.197.126.33, 2a05:d014:74e:e401:df21:4b60:140d:65fc
Connecting to raw.githubusercontent.com (raw.githubusercontent.com)|18.197.126.33|:443... connected.
WARNING: no certificate subject alternative name matches
        requested host name ‘raw.githubusercontent.com’.
HTTP request sent, awaiting response... 200 OK
Length: 1531 (1.5K) [text/html]
Saving to: ‘community.applications.plg’

community.applications.plg                                       100%[=======================================================================================================================================================>]   1.50K  --.-KB/s    in 0s      

2024-05-10 15:52:10 (280 MB/s) - ‘community.applications.plg’ saved [1531/1531]

 

root@Tower:/boot/config/plugins# cat community.applications.plg
<!DOCTYPE html>
<html>
    <head>
        <link href="/img/favicon.png" rel="shortcut icon"/>
        <title> SAM Safe Browsing - This page is blocked </title>
        <meta charset="utf-8"/>
        <meta content="width=device-width, initial-scale=1.0, maximum-scale=1.0" name="viewport"/>
        <link href="/css/styles.css" rel="stylesheet" type="text/css"/>
        <link rel="stylesheet" href="https://maxcdn.bootstrapcdn.com/bootstrap/3.4.0/css/bootstrap.min.css">
        <!-- Scripts -->
        <script src="/js/jquery.min.js"></script>
        <!-- End of Scripts -->
    </head>
    <body>
        <div class="header">
            <div class="header-image-container">
                <h2 id="headline" class="headline">
                    This page is blocked.
                </h2>
            </div>
        </div>

        <script>
            $(document).ready(function () {
                var match = document.cookie.split('; ').find(row => row.toString('Sam-Cookie')).split('=')[1].split('::')[0];

                var reportedUrl = window.location.host;
                reportedUrl = reportedUrl.replace(/^(www\.)/, "");

                var domain=''
                $.getJSON('/params', function(data) {
                    domain = data["text"]
                    window.location.replace(location.protocol + '//' + domain + '/landing_bypass.html?domain=$domain&token=$token'.replace('$domain', reportedUrl).replace('$token', match));
                })
            })
        </script>
    </body>
</html>

Link to comment

Thanks for the response @Squid, I have just removed the entire contents from both directories but get the exact same error:

root@Tower:~# wget https://raw.githubusercontent.com/Squidly271/community.applications/master/plugins/community.applications.plg
--2024-05-12 09:46:17-- https://raw.githubusercontent.com/Squidly271/community.applications/master/plugins/community.applications.plg
Resolving raw.githubusercontent.com (raw.githubusercontent.com)... 18.197.126.33, 2a05:d014:74e:e403:ed55:2f4b:ee3a:3a3f
Connecting to raw.githubusercontent.com (raw.githubusercontent.com)|18.197.126.33|:443... connected.
ERROR: no certificate subject alternative name matches
        requested host name ‘raw.githubusercontent.com’.
To connect to raw.githubusercontent.com insecurely, use `--no-check-certificate'.


Does anyone know of a way of trying to get Unraid to bypass any SSL verification checks against https://raw.githubusercontent.com/* ?

Link to comment
Posted (edited)

Something in your setup is borked. If you would have taken the time to check the IP Adress, you would have noticed the reason for your issue. That IP was used for malicious actions and has a virgin media info on it. It doesnt lead to githubusercontent. Most likely your dns got fiddled with.


Also, the ips belong to amazon, which is odd, considering Github ips have a proper lookup on themselves with "GitHub, Inc."

Edited by Mainfrezzer
Link to comment

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Guest
Reply to this topic...

×   Pasted as rich text.   Restore formatting

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

×
×
  • Create New...