CLI Error: curl: (60) SSL certificate problem: certificate has expired

Astro CLI
1

Issue

If you’re installing the Astro CLI on a Mac, you might hit the following error:

➜  ~ curl -sSL https://install.astronomer.io | sudo bash -s             
Password:curl: (60) SSL certificate problem: certificate has expired
More details here: https://curl.haxx.se/docs/sslcerts.html

curl failed to verify the legitimacy of the server and therefore could not
establish a secure connection to it. To learn more about this situation and
how to fix it, please visit the web page mentioned above.

Resolution

Option 1

Curl from a different endpoint

curl -sSL https://install.gcp0001.us-east4.astronomer.io/ | sudo bash -s

Option 2

Install as root and ignore certificate issues (not recommended)

➜  ~ sudo su
sh-3.2# curl -sSL https://install.astronomer.io -k | bash -s

Option 3

If the password prompt is skipped and the process suspended, bring the process back and attempt again.

➜  ~ curl -sSL https://install.astronomer.io | sudo bash 
Password:curl: (60) SSL certificate problem: certificate has expired
More details here: https://curl.haxx.se/docs/sslcerts.html

curl failed to verify the legitimacy of the server and therefore could not
establish a secure connection to it. To learn more about this situation and
how to fix it, please visit the web page mentioned above.

[1]  + 50356 exit 60                curl -sSL https://install.astronomer.io | 
       50357 suspended (tty input)  sudo bash
➜  ~ fg
[1]  + 50356 exit 60    curl -sSL https://install.astronomer.io | 
       50357 continued  sudo bash
zsh: can't set tty pgrp: operation not permitted
➜  ~ curl -sSL https://install.astronomer.io | sudo bash 
curl: (60) SSL certificate problem: certificate has expired
More details here: https://curl.haxx.se/docs/sslcerts.html

curl failed to verify the legitimacy of the server and therefore could not
establish a secure connection to it. To learn more about this situation and
how to fix it, please visit the web page mentioned above.
Password:

For more details, follow our CLI Quickstart doc.

If you’re curious to know more details on why this is happening, check out "HTTPS connection to specific sites fail with cURL on macOS.

2 Likes