llRequestSecureURL returns a weak url...

[Sabrina Tamerlane]

It's not me who said that! It's curl:

curl https://simhost-..................agni.secondlife.io:12043/cap/........-....-....-....-..........
curl: (60) SSL certificate problem: CA certificate key too weak
More details here: https://curl.haxx.se/docs/sslcerts.html

curl failed to verify the legitimacy of the server and therefore could not
establish a secure connection to it. To learn more about this situation and
how to fix it, please visit the web page mentioned above.

So, I have looked on the net and it seems that I need to lower the security level to make it work... Or is it only on my sim? Did anyone else encounter this issue?

[Quistess Alpha]

2 hours ago, Sabrina Tamerlane said:

It's not me who said that! It's curl:

curl https://simhost-..................agni.secondlife.io:12043/cap/........-....-....-....-..........
curl: (60) SSL certificate problem: CA certificate key too weak
More details here: https://curl.haxx.se/docs/sslcerts.html

curl failed to verify the legitimacy of the server and therefore could not
establish a secure connection to it. To learn more about this situation and
how to fix it, please visit the web page mentioned above.

So, I have looked on the net and it seems that I need to lower the security level to make it work... Or is it only on my sim? Did anyone else encounter this issue?

 

22 hours ago, Xiija said:

just an update for anyone using Node.js

I got mine working by adding this to the Repl.it script...

require('ssl-root-cas')
  .inject()
  .addFile(__dirname + '/cert.crt');

and then copying the certificate and adding it as a file ( cert.crt )

from SecondLife Cert on Bitbucket

 

Security is Annoyingly non-trivial, which is why many SL things seem to be woefully unsecure. It /is/ possible though.

[Sabrina Tamerlane]

Thank you for the feedback but this certificate you linked is 1024 bits which is considered insecure, the requirement these days is 2048 bits. I went with a workaround that still uses llRequestSecureURL but only between SL objects.