Mega: x509: certificate signed by unknown authority

What is the problem you are having with rclone?

Out of the sudden, rclone can no longer login into my mega.nz account.

What is your rclone version (output from rclone version)

rclone v1.52.0
- os/arch: darwin/amd64
- go version: go1.14.3

(Same was with the previous version I had installed, rclone v1.50.2.)

Which OS you are using and how many bits (eg Windows 7, 64 bit)

macOS 10.11 El Capitan

Which cloud storage system are you using? (eg Google Drive)

mega.nz

The command you were trying to run (eg rclone copy /tmp remote:tmp)

rclone ls mymega:

A log from the command with the -vv flag

2020/06/01 06:22:30 Failed to create file system for "mymega:": couldn't login: Post "https://g.api.mega.co.nz/cs?id=4223055540": x509: certificate signed by unknown authority

The only thing changed that jump to mind, is that I had OPENSSL upgraded (the homebrew version 1.1.1d -> 1.1.1g). I tried downgrading back to the previous version but that didn't help.

I also noticed that the AddTrust certificate I have installed in my Keychain expired on the 30th of May, 2020, which was exactly the day I noticed this problem. Donno if that's a coincidence or an actual reason, though...

Would be grateful for some hints, thank you.

1 Like

This is almost certainly something to do with your root certificates...

What happens if you go to https://g.api.mega.co.nz in the browser - do you get the same certificate warning?

How about

curl https://g.api.mega.co.nz

or

rclone copyurl --stdout https://g.api.mega.co.nz

If you can, upgrade your OS and it's very much end of life as the root certificates don't seem to be updated.

Yeah, it's the same:

~> curl https://g.api.mega.co.nz
curl: (60) SSL certificate problem: unable to get local issuer certificate
More details here: https://curl.haxx.se/docs/sslcerts.html

curl failed to verify the legitimacy of the server and therefore could not
establish a secure connection to it. To learn more about this situation and
how to fix it, please visit the web page mentioned above.

~> rclone copyurl --stdout https://g.api.mega.co.nz
2020/06/01 13:41:01 ERROR : Attempt 1/3 failed with 1 errors and: Get "https://g.api.mega.co.nz": x509: certificate signed by unknown authority
2020/06/01 13:41:02 ERROR : Attempt 2/3 failed with 1 errors and: Get "https://g.api.mega.co.nz": x509: certificate signed by unknown authority
2020/06/01 13:41:02 ERROR : Attempt 3/3 failed with 1 errors and: Get "https://g.api.mega.co.nz": x509: certificate signed by unknown authority
2020/06/01 13:41:02 Failed to copyurl: Get "https://g.api.mega.co.nz": x509: certificate signed by unknown authority

I can't fix it on my side, right?

1 Like

Unfortunately, I can't, it's the latest OS this Unibody MacBook can handle.

There isn't any other workaround, is there?

You'd have to figure out how to manually update the certificates on that version of MacOS.

It should be possible via the keychain and some googling I'd imagine.

You can use this flag. Not a great idea in general but it should get you going again!

  --no-check-certificate   Do not verify the server SSL certificate. Insecure.
1 Like

Yeah, Nick, I know about it but thanks anyway :slight_smile:

1 Like

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.