Problem: WGet can fail with SSL problems that are confusing to users.

User: end users

Solution: WGet version check, OpenSSL version check, add no-certificate-check option to script (with note of "use at own risk").

Stakeholder: Janssen, Emily Elizabeth
 ejansse2@illinois.edu

Dear EarthSystem support,

I am a graduate student at UIUC and I am working on developing a methodology for my PhD project.

I was directed to your website by the data help people at UCAR to download data in order to calculate CAPE. I am trying to get CCSM4 data as that was what was associated with CMIP5. I have an account on the Earthsystemgrid website and I created a script to download the PHIS data from CCSM4 for 6hourly averages. Then I downloaded the script onto our local machine and tried to run the script in Linux. The script compiled and I entered my openID into the script before running the program. But then it tries to download each file and fails every time, creating empty files as it runs. The only thing I can think of right now is that my version of wget may be out of date for running this script?

I am copying and pasting the errors I am getting below...

Running wget-download.sh version: 0.4.4-certificate
OpenSSL 1.0.1e-fips 11 Feb 2013
** WARNING: ESGF Host certificate checking might not be compatible with OpenSSL 1.0+
b30.041e.cam2.h3.PHIS.2000-01-01_cat_2009-12-31.nc ...Downloading
OpenSSL: error:14094416:SSL routines:SSL3_READ_BYTES:sslv3 alert certificate unknown
Unable to establish SSL connection.
download failed
b30.041e.cam2.h3.PHIS.2010-01-01_cat_2019-12-31.nc ...Downloading
OpenSSL: error:14094416:SSL routines:SSL3_READ_BYTES:sslv3 alert certificate unknown
Unable to establish SSL connection.
download failed

Hoping someone over there can help!
Thank you,
Emily Janssen