starred/LinuxGSM

Fork 0

mirror of https://github.com/GameServerManagers/LinuxGSM.git synced 2026-04-26 06:35:54 +03:00

[GH-ISSUE #1703] Why instruct users to use wget --no-check-certificate when downloading lgsm? #1327

New issue

Closed

opened 2026-02-27 02:56:31 +03:00 by kerem · 10 comments

kerem commented

2026-02-27 02:56:31 +03:00

Owner

Originally created by @Flightkick on GitHub (Nov 22, 2017).
Original GitHub issue: https://github.com/GameServerManagers/LinuxGSM/issues/1703

Originally assigned to: @dgibbs64 on GitHub.

On the server pages, for example: https://gameservermanagers.com/lgsm/dstserver/

The command that is given to the users is: wget -N --no-check-certificate https://gameservermanagers.com/dl/linuxgsm.sh && chmod +x linuxgsm.sh && bash linuxgsm.sh dstserver

Using this flag disables SSL security checks. Why is this recommended as default when downloading a script that gets to be executed?

Originally created by @Flightkick on GitHub (Nov 22, 2017). Original GitHub issue: https://github.com/GameServerManagers/LinuxGSM/issues/1703 Originally assigned to: @dgibbs64 on GitHub. On the server pages, for example: https://gameservermanagers.com/lgsm/dstserver/ The command that is given to the users is: wget -N **--no-check-certificate** https://gameservermanagers.com/dl/linuxgsm.sh && chmod +x linuxgsm.sh && bash linuxgsm.sh dstserver Using this flag disables SSL security checks. Why is this recommended as default when downloading a script that gets to be executed?

kerem

2026-02-27 02:56:31 +03:00

closed this issue
added the
type: feature

outcome: issue resolved

info: docs

info: website
labels

kerem commented

2026-02-27 02:56:32 +03:00

Author

Owner

@JimTR commented on GitHub (Nov 22, 2017):

I totally agree with you ... the content should be delivered via a secure connection

@JimTR commented on GitHub (Nov 22, 2017): I totally agree with you ... the content should be delivered via a secure connection

kerem commented

2026-02-27 02:56:32 +03:00

Author

Owner

@UltimateByte commented on GitHub (Nov 22, 2017):

The connection is true TLS, so this argument isn't even necessary in most cases.

I believe this is here by default as a workaround for an issue with some wget versions that don't support wget redirection along with TLS, probably in Debian 7 or CentOS 6.

I just tested with my servers on Centos 7, Debian 8 and Debian 9 and didn't face the issue.

So unless there is a very good reason I cannot recall, I agree that --no-check-certificate should be removed.

If somebody with a legacy OS could test this, I'd be grateful.

@UltimateByte commented on GitHub (Nov 22, 2017): The connection is true TLS, so this argument isn't even necessary in most cases. I believe this is here by default as a workaround for an issue with some wget versions that don't support wget redirection along with TLS, probably in Debian 7 or CentOS 6. I just tested with my servers on Centos 7, Debian 8 and Debian 9 and didn't face the issue. So unless there is a very good reason I cannot recall, I agree that `--no-check-certificate` should be removed. If somebody with a legacy OS could test this, I'd be grateful.

kerem commented

2026-02-27 02:56:32 +03:00

Author

Owner

@Flightkick commented on GitHub (Nov 22, 2017):

I'm not familiar with the site's history but I can imagine the --no-check-certificate was added if the site has ever used Let's Encrypt (which was not added to trusted CA's for different platforms in the beginning).

If there's anyone having issues downloading without the flag you might want to have the option documented including the possible risks. It could then be removed from default instructions.

Thanks!

@Flightkick commented on GitHub (Nov 22, 2017): I'm not familiar with the site's history but I can imagine the `--no-check-certificate ` was added if the site has ever used Let's Encrypt (which was not added to trusted CA's for different platforms in the beginning). If there's anyone having issues downloading without the flag you might want to have the option documented including the possible risks. It could then be removed from default instructions. Thanks!

kerem commented

2026-02-27 02:56:32 +03:00

Author

Owner

@UltimateByte commented on GitHub (Nov 22, 2017):

Well, it seems like we pretty much wrapped the topic.
I could modify the website but since it isn't an emergency, I'll let @dgibbs64 take care of it when he can. :)

@UltimateByte commented on GitHub (Nov 22, 2017): Well, it seems like we pretty much wrapped the topic. I could modify the website but since it isn't an emergency, I'll let @dgibbs64 take care of it when he can. :)

kerem commented

2026-02-27 02:56:32 +03:00

Author

Owner

@dgibbs64 commented on GitHub (Nov 22, 2017):

--no-check-certificate is used for older distros that have issues with SSL. I used to get loads of people complaining they couldn't download the scripts becuase of it. the % of people with the issue may be drastically reduced by now.

@dgibbs64 commented on GitHub (Nov 22, 2017): `--no-check-certificate` is used for older distros that have issues with SSL. I used to get loads of people complaining they couldn't download the scripts becuase of it. the % of people with the issue may be drastically reduced by now.

kerem commented

2026-02-27 02:56:32 +03:00

Author

Owner

@UltimateByte commented on GitHub (Nov 22, 2017):

So I recalled well. :p

Well, I'll add this to the FAQ so that you can alter the website if you think it's a good idea.

@UltimateByte commented on GitHub (Nov 22, 2017): So I recalled well. :p Well, I'll add this to the FAQ so that you can alter the website if you think it's a good idea.

kerem commented

2026-02-27 02:56:32 +03:00

Author

Owner

@UltimateByte commented on GitHub (Nov 22, 2017):

Done
https://github.com/GameServerManagers/LinuxGSM/wiki/FAQ#i-cant-download-linuxgsmsh-tlsssl-errors

@UltimateByte commented on GitHub (Nov 22, 2017): Done https://github.com/GameServerManagers/LinuxGSM/wiki/FAQ#i-cant-download-linuxgsmsh-tlsssl-errors

kerem commented

2026-02-27 02:56:32 +03:00

Author

Owner

@UltimateByte commented on GitHub (Dec 26, 2017):

Here is why we shouldn't keep --no-check-certificate by default : https://github.com/GameServerManagers/LinuxGSM/issues/1749#issuecomment-353980472

@UltimateByte commented on GitHub (Dec 26, 2017): Here is why we shouldn't keep --no-check-certificate by default : https://github.com/GameServerManagers/LinuxGSM/issues/1749#issuecomment-353980472

kerem commented

2026-02-27 02:56:32 +03:00

Author

Owner

@dgibbs64 commented on GitHub (Jul 21, 2018):

This issue is now resolved.

@dgibbs64 commented on GitHub (Jul 21, 2018): This issue is now resolved.

kerem commented

2026-02-27 02:56:32 +03:00

Author

Owner

@lock[bot] commented on GitHub (Jul 21, 2019):

This thread has been automatically locked since there has not been any recent activity after it was closed. Please open a new issue for related bugs.

@lock[bot] commented on GitHub (Jul 21, 2019): This thread has been automatically locked since there has not been any recent activity after it was closed. Please open a new issue for related bugs.