Simply add the `-k` switch somewhere before the url.

Disclaimer: Use this at your own risk.


    man curl | less +/--insecure

&gt; -k, --insecure
&gt; (TLS)  By  default, every SSL connection curl makes is verified to be secure. This option allows curl to proceed and operate
&gt; even for server connections otherwise considered insecure.
&gt;
&gt; The server connection is verified by making sure the server&#39;s certificate contains the right name and verifies  successfully
&gt; using the cert store.
&gt;
&gt;  See this online resource for further details:
&gt; https://curl.haxx.se/docs/sslcerts.html
&gt;
&gt;  See also --proxy-insecure and --cacert


I have the following piece of code, which receives a history object as prop:

    const ChildComponent = ({ history }) =&gt; (
            &lt;div className={styles.body}&gt;
                &lt;div className={styles.cta}&gt;
                    &lt;FloatingActionButton onClick={() =&gt; history.push(routes[4].path)}&gt;
                        &lt;span&gt;Click me&lt;/span&gt;
                    &lt;/FloatingActionButton&gt;
                &lt;/div&gt;
            &lt;/div&gt;
    );

How do I add typecheck for this history prop, **which is received by wrapping it&#39;s parent with withRouter HOC**? One way I could think of is to write something like this:

    interface Props {
        history: {
            push(url: string): void;
        };
    }

But I&#39;m sure this is not the right way, because rest of the properties of the history object are being lost.

Can you suggest the right way of doing this?

**UPDATED the code based on @Oblosys&#39;s answer**

    import { withRouter, RouteComponentProps } from &quot;react-router-dom&quot;;

    interface Props extends RouteComponentProps&lt;any&gt; {
       /* Parent component&#39;s props*/
    }
    
    class Parent extends React.Component&lt;Props, {}&gt; {
        render() {
            return &lt;ChildComponent history={this.props.history} /&gt;;
        }
    }
    
    //Child component related stuff
    interface ChildComponentProps extends RouteComponentProps&lt;any&gt; {}
    
    const ChildComponent: React.SFC&lt;ChildComponentProps&gt; = (props) =&gt; (
      &lt;div className={styles.body}&gt;
         &lt;div className={styles.cta}&gt;
             &lt;FloatingActionButton onClick={() =&gt; history.push(routes[4].path)}&gt;
                &lt;span&gt;Click me&lt;/span&gt;
             &lt;/FloatingActionButton&gt;
         &lt;/div&gt;
       &lt;/div&gt;
    );

    function mapStateToProps(state: types.AppState) {
        /* related code */
    }
    
    function mapDispatchToProps(dispatch: Redux.Dispatch&lt;types.AppState&gt;{
        /* related code */
    }

    export default withRouter(connect(mapStateToProps, mapDispatchToProps)(Parent));

But, now I&#39;m getting the following error:

    Type &#39;{ history: History; }&#39; is not assignable to type &#39;ChildComponentProps&#39;.
        Property &#39;match&#39; is missing in type &#39;{ history: History; }&#39;

Typescript: How to add type check for history object in React?

I have an ES6 module that exports two constants:

    export const foo = &quot;foo&quot;;
    export const bar = &quot;bar&quot;;

I can do the following in another module:

    import { foo as f, bar as b } from &#39;module&#39;;
    console.log(`${f} ${b}`); // foo bar

When I use NodeJS modules, I would have written it like this:

    module.exports.foo = &quot;foo&quot;;
    module.exports.bar = &quot;bar&quot;;

Now when I use it in another module can I somehow rename the imported variables as with ES6 modules?

    const { foo as f, bar as b } = require(&#39;module&#39;); // invalid syntax
    console.log(`${f} ${b}`); // foo bar

How can I rename the imported constants in NodeJS modules?


Can I use alias with NodeJS require function?

Hello i want to use an API for a website but there an error with my curl command.

I want to **disable** SSL certificate verification.

    curl: (60) SSL certificate problem: self signed certificate in certificate chain
    More details here: https://curl.haxx.se/docs/sslcerts.html
    
    curl failed to verify the legitimacy of the server and therefore could not
    establish a secure connection to it. To learn more about this situation and
    how to fix it, please visit the web page mentioned above.



How to disable cURL SSL certificate verification

Hello i want to use an API for a website but there an error with my curl command.
I want to disable SSL certificate verification.
<pre><code class="hljs language-vbnet">curl: (60) SSL certificate problem: self signed certificate in certificate chain
More details here: https://curl.haxx.se/docs/sslcerts.html

curl failed to verify the legitimacy of the server and therefore could not
establish a secure connection to it. To learn more about this situation and
how to fix it, please visit the web page mentioned above.
</code></pre>

I am writing a bash script which bootstraps the whole project infrastructure in the freshly installed server and i want to configure ssl installation with letcecrypt certbot. After I execute line:

    certbot --nginx -d $( get_server_name ) -d www.$( get_server_name ).com

I get prompted for few questions. Can certbot be run without any interactions while passing some of the params as arguments or something ?

How to install Certbot (Let&#39;s Encrypt) without interaction?

When l try to use `git push`, an error reports: 

&gt; Fatal: fatal: unable to access &#39;https://github.com/xxx&#39;: OpenSSL
&gt; SSL_connect: SSL_ERROR_SYSCALL in connection to github.com:443

My git version is 2.16.2 for windows

It worked well before this day, and reinstalling git seems to not work.

Can anyone help me with that? Thanks in advance!



fatal: unable to access &#39;https://github.com/xxx&#39;: OpenSSL SSL_connect: SSL_ERROR_SYSCALL in connection to github.com:443

I&#39;d like to install the pymongo library but I&#39;m getting the following error:

        (C:\Users\xxxxxxx\AppData\Local\Continuum\anaconda3) C:\Users\xxxxxxx&gt;
        conda install -c anaconda pymongo

        Fetching package metadata ...
        CondaHTTPError: HTTP 000 CONNECTION FAILED for url &lt;https://conda.anaconda.org/a
        naconda/win-64/repodata.json&gt;
        Elapsed: -
        
        An HTTP error occurred when trying to retrieve this URL.
        HTTP errors are often intermittent, and a simple retry will get you on your way.
        
        ConnectTimeout(MaxRetryError(&quot;HTTPSConnectionPool(host=&#39;conda.anaconda.org&#39;, por
        t=443): Max retries exceeded with url: /anaconda/win-64/repodata.json (Caused by
         ConnectTimeoutError(&lt;urllib3.connection.VerifiedHTTPSConnection object at 0x000
        00000054D6128&gt;, &#39;Connection to conda.anaconda.org timed out. (connect timeout=9.
        15)&#39;))&quot;,),)

Steps taken to resolve:

    1. Update C:\Users\\xxxxxxx\.condarc file with the following:
    
    channels:
      - defaults
    ssl_verify: false
    proxy_servers:
    http: http://sproxy.fg.xxx.com:1000
    https: https://sproxy.fg.xxx.com:1000

    2. (C:\Users\xxxxxxx\AppData\Local\Continuum\anaconda3) C:\Users\xxxxxxx&gt;
        conda config --set ssl_verify False

Additional Info:

    (C:\Users\xxxxxxx\AppData\Local\Continuum\anaconda3) C:\Users\xxxxxxx&gt;
    conda info
    
    Current conda install:
    
                   platform : win-64
              conda version : 4.3.27
           conda is private : False
          conda-env version : 4.3.27
        conda-build version : 3.0.22
             python version : 3.6.2.final.0
           requests version : 2.18.4
                config file : C:\Users\xxxxxxx\.condarc
                 netrc file : None
               offline mode : False
                 user-agent : conda/4.3.27 requests/2.18.4 CPython/3.6.2 Windows/7 W
    indows/6.1.7601
              administrator : False

A number of posts online simply reinstalled Anaconda, any other options apart from a fresh install?


Issues with installing python libraries on Windows : CondaHTTPError: HTTP 000 CONNECTION FAILED for url &lt;https://conda.anaconda.org/anaconda/win-64

I have a question about how and what is the version of OpenSSl that I must install in Windows to later create certificates.
Install a one version (openssl-1.0.2d-fips-2.0.10) found in SourceForge but it does not generate the files correctly.
There is also the official website https://www.openssl.org, but I do not know how to install it and how, so that when it comes to generating the keys and .pem file, it works.
Generate some environment variables that point to the folder where I unzipped the downloaded, I do not know if it is the correct way.

How to install OpenSSL in windows 10?

I was trying to pull a docker image from a docker registry but hit the following issue:

    $ docker pull &lt;docker registry&gt;/&lt;image name&gt;/&lt;tag&gt; 
    Error response from daemon: Get &lt;docker registry&gt;/v1/_ping: x509: certificate signed by unknown authority

I tried with &quot;curl&quot; and get a similar error message:

     curl performs SSL certificate verification by default, using a &quot;bundle&quot;
     of Certificate Authority (CA) public keys (CA certs). If the default
     bundle file isn&#39;t adequate, you can specify an alternate file
     using the --cacert option.

So I downloaded the CA certificate and imported to the server (RedHat Linux 7) with the following commands:

    cp root_cert.cer /etc/pki/ca-trust/source/anchors/
    update-ca-trust

After the root cert is imported, I can see `curl` is working fine as it won&#39;t complain the cert error, however if I use `docker pull` I still have the same issue. Is `docker` using different ca-cert location than `curl`? How do I fix the issue with `docker pull` in this situation?

&quot;docker pull&quot; certificate signed by unknown authority

I am calling my java webservice (POST request) via POSTMAN in the following manner which works perfectly fine (i.e. I can see my records getting inserted into the database):

[![enter image description here][1]][1]


And, here&#39;s how the contents inside the `Headers(1)` tab looks like:

[![enter image description here][2]][2]


Instead of calling it via POSTMAN, I have to call the same request in PHP using CURL. I am wondering if there&#39;s a way to export this command to `curl` command so that I could use it in my PHP code? I have found opposite approach at many places online where someone is asking to convert Curl based request to POSTMAN but couldn&#39;t figure out how to do the opposite.

Some [article][3]s I found for curl to postman


  [1]: https://i.stack.imgur.com/M1D5Y.png
  [2]: https://i.stack.imgur.com/uwVrt.png
  [3]: https://stackoverflow.com/questions/27957943/simulate-a-specific-curl-in-postman

Converting a POSTMAN request to Curl

When I try to connect to any server (e.g. google.com) using curl (or libcurl) I get the error message:

&gt; curl: (35) error:1408F10B:SSL routines:ssl3_get_record:wrong version number

Verbose output:

    $ curl www.google.com --verbose  
    * Rebuilt URL to: www.google.com/  
    * Uses proxy env variable no_proxy == &#39;localhost,127.0.0.1,localaddress,.localdomain.com&#39;  
    * Uses proxy env variable http_proxy == &#39;https://proxy.in.tum.de:8080&#39;  
    *   Trying 131.159.0.2...  
    * TCP_NODELAY set  
    * Connected to proxy.in.tum.de (131.159.0.2) port 8080 (#0)  
    * successfully set certificate verify locations:  
    *   CAfile: /etc/ssl/certs/ca-certificates.crt  
      CApath: none  
    * TLSv1.3 (OUT), TLS handshake, Client hello (1):  
    * error:1408F10B:SSL routines:ssl3_get_record:wrong version number  
    * Closing connection 0  
    curl: (35) error:1408F10B:SSL routines:ssl3_get_record:wrong version number&#39;  

For some reason curl seems to use TLSv1.3 even if I force it to use TLSv1.2 with the command --tlsv1.2  (it will still print TLSv1.3 (OUT), ...&quot; 
I am using the newest version of both Curl and OpenSSL :

    $ curl -V  
    curl 7.61.0-DEV (x86_64-pc-linux-gnu) libcurl/7.61.0-DEV OpenSSL/1.1.1 zlib/1.2.8  
    Release-Date: [unreleased]  
    Protocols: dict file ftp ftps gopher http https imap imaps pop3 pop3s rtsp smb smbs smtp smtps telnet tftp  
    Features: AsynchDNS IPv6 Largefile NTLM NTLM_WB SSL libz TLS-SRP UnixSockets HTTPS-proxy  

I think this is a problem related to my installation of the programms.
Can somebody explain to me what this error message means?

curl: (35) error:1408F10B:SSL routines:ssl3_get_record:wrong version number

I recently started using libCurl for my VC++ project. I&#39;ve been wondering: what is the incentive for the curl creators to release the entire library for free?

Is it purely to help their fellow developers? This is one of the best open source libraries I&#39;ve used in recent times. (Other than Python and R programming languages).

&gt; Project cURL is entirely free and open. No person gets paid for
&gt; developing curl full time. We do this voluntarily, mostly in our spare
&gt; time. Occasionally companies pay individual developers to work on
&gt; curl, but that&#39;s up to each company and developer. This is not
&gt; controlled by nor supervised in any way by the project.

What is the incentive for curl to release the library for free?

I&#39;m currently working on a website, which triggers a ```net::ERR_HTTP2_PROTOCOL_ERROR 200``` error on Google Chrome. I&#39;m not sure exactly what can provoke this error, I just noticed it pops out only when accessing the website in HTTPS. I can&#39;t be 100% sure it is related, but it looks like it prevents JavaScript to be executed properly.

For instance, the following scenario happens :

1. I&#39;m accessing the website in HTTPS

2. My Twitter feed integrated via https://publish.twitter.com  isn&#39;t loaded at all 

3. I can notice in the console the ERR_HTTP2_PROTOCOL_ERROR

4. If I remove the code to load the Twitter feed, the error remains

5. If I access the website in HTTP, the Twitter feed appears and the error disappears 

Google Chrome is the only web browser triggering the error: it works well on both Edge and Firefox.
(NB: I tried with Safari, and I have a similar ```kcferrordomaincfnetwork 303``` error)

I was wondering if it could be related to the header returned by the server since there is this &#39;200&#39; mention in the error, and a 404 / 500 page isn&#39;t triggering anything. 

Thing is the error isn&#39;t documented at all. Google search gives me very few results. Moreover, I noticed it appears on very recent Google Chrome releases; the error doesn&#39;t pop on v.64.X, but it does on v.75+ (regardless of the OS; I&#39;m working on Mac tho).

----------


Might be related to https://stackoverflow.com/questions/49927327/website-ok-on-firefox-but-not-on-safari-kcferrordomaincfnetwork-error-303-neit


----------


Findings from further investigations are the following:

 - **error doesn&#39;t pop on the exact same page if server returns 404 instead of 2XX**
 - error doesn&#39;t pop on local with a HTTPS certificate
 - error pops on a different server (both are OVH&#39;s), which uses a different certificate
 - error pops no matter what PHP version is used, from 5.6 to 7.3 (framework used : Cakephp 2.10)

As requested, below is the returned header for the failing ressource, which is the whole web page. Even if the error is triggering on each page having a HTTP header 200, those pages are always loading on client&#39;s browser, but sometimes an element is missing (in my exemple, the external Twitter feed). Every other asset on the Network tab has a success return, except the whole document itself. 
[![line that failed in console][1]][1]

Google Chrome header (with error):

[![Chrome header][2]][2]


Firefox header (without error):

[![Firefox header][3]][3]

A ```curl --head --http2``` request in console returns the following success:
```
HTTP/2 200 
date: Fri, 04 Oct 2019 08:04:51 GMT
content-type: text/html; charset=UTF-8
content-length: 127089
set-cookie: SERVERID31396=2341116; path=/; max-age=900
server: Apache
x-powered-by: PHP/7.2
set-cookie: xxxxx=0919c5563fc87d601ab99e2f85d4217d; expires=Fri, 04-Oct-2019 12:04:51 GMT; Max-Age=14400; path=/; secure; HttpOnly
vary: Accept-Encoding
```

----------

Trying to go deeper with the chrome://net-export/ and https://netlog-viewer.appspot.com tools is telling me the request ends with a RST_STREAM :
```
t=123354 [st=5170]    HTTP2_SESSION_RECV_RST_STREAM
                      --&gt; error_code = &quot;2 (INTERNAL_ERROR)&quot;
                      --&gt; stream_id = 1
```
For what I read in [this other post][4], &quot;*In HTTP/2, if the client wants to abort the request, it sends a RST_STREAM. When the server receives a RST_STREAM, it will stop sending DATA frames to the client, thereby stopping the response (or the download). The connection is still usable for other requests, and requests/responses that were concurrent with the one that has been aborted may continue to progress.
[...]
It is possible that by the time the RST_STREAM travels from the client to the server, the whole content of the request is in transit and will arrive to the client, which will discard it. However, for large response contents, sending a RST_STREAM may have a good chance to arrive to the server before the whole response content is sent, and therefore will save bandwidth.*&quot;

The described behavior is the same as the one I can observe. But that would mean the browser is the culprit, and then I wouldn&#39;t understand why it happens on two identical pages with one having a 200 header and the other a 404 (same goes if I disable JS).
 

  [1]: https://i.stack.imgur.com/ZkdHo.png
  [2]: https://i.stack.imgur.com/0wCrD.png
  [3]: https://i.stack.imgur.com/AAtn8.png
  [4]: https://stackoverflow.com/questions/28736463/rst-stream-frame-in-http2

What&#39;s the net::ERR_HTTP2_PROTOCOL_ERROR about?

I am trying to install a Python library using `pip`, getting an SSL error:

    ~/projects/base  pre-master&#177;  pip install xdict

    Collecting xdict
      Could not fetch URL https://pypi.python.org/simple/xdict/: There was a problem confirming the ssl certificate: [SSL: TLSV1_ALERT_PROTOCOL_VERSION] tlsv1 alert protocol version (_ssl.c:590) - skipping
      Could not find a version that satisfies the requirement xdict (from versions: )
    No matching distribution found for xdict

pip version: pip 9.0.1

How do I fix this error?


Not able to install Python packages [SSL: TLSV1_ALERT_PROTOCOL_VERSION]

I&#39;m practicing the code from &#39;Web Scraping with Python&#39;, and I keep having this certificate problem:

    from urllib.request import urlopen 
    from bs4 import BeautifulSoup 
    import re

    pages = set()
    def getLinks(pageUrl):
    	global pages
    	html = urlopen(&quot;http://en.wikipedia.org&quot;+pageUrl)
    	bsObj = BeautifulSoup(html)
    	for link in bsObj.findAll(&quot;a&quot;, href=re.compile(&quot;^(/wiki/)&quot;)):
    		if &#39;href&#39; in link.attrs:
    			if link.attrs[&#39;href&#39;] not in pages:
    				#We have encountered a new page
    				newPage = link.attrs[&#39;href&#39;] 
    				print(newPage) 
    				pages.add(newPage) 
    				getLinks(newPage)
    getLinks(&quot;&quot;)

The error is:

      File &quot;/Library/Frameworks/Python.framework/Versions/3.7/lib/python3.7/urllib/request.py&quot;, line 1319, in do_open
        raise URLError(err)
    urllib.error.URLError: &lt;urlopen error [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1049)&gt;


Btw,I was also practicing scrapy, but kept getting the problem: command not found: scrapy (I tried all sorts of solutions online but none works... really frustrating)

Scraping: SSL: CERTIFICATE_VERIFY_FAILED error for http://en.wikipedia.org

I&#39;m trying to make a request with axios to an api endpoint and I&#39;m getting the following error: `Error: unable to verify the first certificate`

It seems the https module, which axios uses, is unable to verify the SSL certificate used on the server.

When visiting the server with my browser, the certificate is valid and I can see/download it. I can also make requests to the api on my browser through https.

I can work around it by turning off verification. This code works.

    const result = await axios.post(
        `https://${url}/login`,
        body,
        {
          httpsAgent: new https.Agent({
            rejectUnauthorized: false
          })
        }
      )

Problem is, this doesn&#39;t verify the SSL certificate and therefore opens up security holes.

How can I configure axios to trust the certificate and correctly verify it?

Content Type	Original Author	Original Content on Stackoverflow
Question	Micky	View Question on Stackoverflow
Solution 1 - Ssl	Gilles Quenot	View Answer on Stackoverflow

How to disable cURL SSL certificate verification

Ssl Problem Overview

Ssl Solutions

Solution 1 - Ssl

Can I use alias with NodeJS require function?

Typescript: How to add type check for history object in React?

Attributions