mrward/monodevelop-nuget-addin

"Untrusted HTTP certificate detected" on Ubuntu

atrauzzi opened this issue · 4 comments

I keep getting the following message when trying to use this plugin on Ubuntu 13.10:

"Do you want to temporarily trust this certificate in order to connect to the server at www.nuget.org?"

It would be nice if this confirmation could be remembered permanently somehow.

Did you try installing all the Mozilla root certificates using the following?

mozroots --import --sync

You can also add a single root certificate using certmgr so it is trusted by mono. There is some information on the Mono security FAQ.

Finally if you can live without https you can switch to http for the nuget.org packages url.

Works! Thanks so much for such a great tool, I really love having NuGet for .NET from Linux.

Thanks! Good to know. I saw someone else executing this command somewhere but I didn't know why, or what it did.

first search result for "monodevelop trust http nuget"
mozroots is deprecated, please move to cert-sync instead.

>user<:~$ mozroots --import --sync
Mozilla Roots Importer - version 5.10.1.47
Download and import trusted root certificates from Mozilla's MXR.
Copyright 2002, 2003 Motus Technologies. Copyright 2004-2008 Novell. BSD licensed.

WARNING: mozroots is deprecated, please move to cert-sync instead.

Downloading from 'https://hg.mozilla.org/releases/mozilla-release/raw-file/default/security/nss/lib/ckfw/builtins/certdata.txt'...
WARNING: Downloading the trusted certificate list couldn't be done securely (error: RemoteCertificateChainErrors), continuing anyway. If you're using mozroots to bootstrap Mono's trust store on a clean system this might be OK, otherwise it could indicate a network intrusion. Please ensure you're using a trusted network or move to cert-sync.
Importing certificates into user store...