getnonfreefonts: certificate errors

Tom Kacvinsky tkacvins at
Sat Nov 6 23:13:34 CET 2021


I see the same problem with getnonfreefonts on my MacBook Pro

athena:Desktop tjk$ sudo getnonfreefonts --sys

--2021-11-06 18:02:32--

Resolving (

Connecting to (||:443... connected.

ERROR: cannot verify's certificate, issued by ‘CN=R3,O=Let's

  Issued certificate has expired.

To connect to insecurely, use `--no-check-certificate'.

! Error: Can't execute wget.

I did some research and found this

So I _suspect_ the version of wget in use uses an older version of OpenSSL.

Perhaps wget might be using GnuTLS, but I am not sure of the Let's Encrypt

certificates will have a problem with GnuTLS.

In the meantime, I am going to build the most current wget with the most

current OpenSSL 1.1.1 and see how I fare.


On Sat, Nov 6, 2021 at 5:50 PM Reinhard Kotucha <reinhard.kotucha at>

> Hi,
> David (who is in the CC) reported a problem with getnonfreefonts:
>  | Resolving
>  | Connecting to||:443... connected.
>  | ERROR: The certificate of '' is not trusted.
>  | ERROR: The certificate of '' has expired.
>  | ! Error: Can't execute wget.
> I can't reproduce the problem and when I examine the certificates
> within Firefox I see that they're all up-to-date.
> Can anybody explain how this can happen and how the problem can be
> solved?
> Regards,
>   Reinhard
> --
> ------------------------------------------------------------------
> Reinhard Kotucha                            Phone: +49-511-3373112
> Marschnerstr. 25
> D-30167 Hannover                    mailto:reinhard.kotucha at
> ------------------------------------------------------------------
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <>

More information about the tex-live mailing list.