Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Trying to get a gem:

$gem install puppet
ERROR:  Could not find a valid gem 'puppet' (>= 0), here is why:
          Unable to download data from - SSL_connect returned=1 errno=0 state=SSLv3 read server certificate B: certificate verify failed (

I looked at the certificate used by

$openssl s_client -showcerts -connect 
Certificate chain
0 s:/serialNumber=RRAXldgzDrRZWQpGo6FHdTHV3qwvwXtD/OU=GT35895174/OU=See (c)13/OU=Domain Control Validated - RapidSSL(R)/CN=*
  i:/C=US/O=GeoTrust, Inc./CN=RapidSSL CA
1 s:/C=US/O=GeoTrust, Inc./CN=RapidSSL CA
  i:/C=US/O=GeoTrust Inc./CN=GeoTrust Global CA

So I downloaded the GeoTrust CA:


And now I'm left with the last task, install this CA. But I can't find the proper way to do it. Specifically, using certutil as described here:

$cd /var/lib/instance_name/alias
$certutil -A -n cert-name -t trustargs -d . -a -i certificate_file

My old Fedora 8 system does not have a /var/lib/instance_name/alias 'subsystem security database directory' and I really failed at locating one.

Any hints?

share|improve this question

Have you tried installing ca-certificates (via sudo yum install ca-certificates)? If it is installed, you could try reinstalling it.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.