http://qs321.pair.com?node_id=1230967

Perl300 has asked for the wisdom of the Perl Monks concerning the following question:

Hello monks

I am trying to install perlbrew on Linux machine

[user@host ~]$ cat /etc/redhat-release Red Hat Enterprise Linux Server release 6.8 (Santiago)
When I try using curl or wget, I continue to get certificate error:
[user@host ~]$ curl -L https://install.perlbrew.pl | bash curl: (60) Peer certificate cannot be authenticated with known CA cert +ificates More details here: http://curl.haxx.se/docs/sslcerts.html curl performs SSL certificate verification by default, using a "bundle +" of Certificate Authority (CA) public keys (CA certs). If the default bundle file isn't adequate, you can specify an alternate file using the --cacert option. If this HTTPS server uses a certificate signed by a CA represented in the bundle, the certificate verification probably failed due to a problem with the certificate (it might be expired, or the name might not match the domain name in the URL). If you'd like to turn off curl's verification of the certificate, use the -k (or --insecure) option.
I tried with -k option as well but that also fails:
[user@host ~]$ curl -kL https://install.perlbrew.pl | bash % Total % Received % Xferd Average Speed Time Time Time + Current Dload Upload Total Spent Left + Speed 103 1548 103 1548 0 0 1335 0 0:00:01 0:00:01 --:--: +-- 1335 ## Download the latest perlbrew curl: (60) Peer certificate cannot be authenticated with known CA cert +ificates More details here: http://curl.haxx.se/docs/sslcerts.html curl performs SSL certificate verification by default, using a "bundle +" of Certificate Authority (CA) public keys (CA certs). If the default bundle file isn't adequate, you can specify an alternate file using the --cacert option. If this HTTPS server uses a certificate signed by a CA represented in the bundle, the certificate verification probably failed due to a problem with the certificate (it might be expired, or the name might not match the domain name in the URL). If you'd like to turn off curl's verification of the certificate, use the -k (or --insecure) option.
Using wget throws following error:
[user@host ~]$ wget -O - https://install.perlbrew.pl | bash --2019-03-06 10:58:43-- https://install.perlbrew.pl/ Resolving install.perlbrew.pl... 64.62.231.202 Connecting to install.perlbrew.pl|64.62.231.202|:443... connected. ERROR: cannot verify install.perlbrew.pl’s certificate, issued by “/DC +=com/DC=<my_domain>/DC=<my_domain>/CN=<my_domain> Enterprise Root CA” +: Self-signed certificate encountered. To connect to install.perlbrew.pl insecurely, use ‘--no-check-certific +ate’.
Using ‘--no-check-certificate’ option also gives the same error as above.

Could this be a firewall issue (I am behind a corporate firewall) or SSL certificate issue as error says?

Trying to find if someone faced this and know how to get around it.

UPDATE: Marked subject as SOLVED.