log4j-poc icon indicating copy to clipboard operation
log4j-poc copied to clipboard

wget call in Dockerfile should use --no-check-certificate

Open alvinslee opened this issue 10 months ago • 0 comments

Dockerfile for cve-web includes a wget call to archive.apache.org. This is causing an error:

0.888 ERROR: The certificate of 'archive.apache.org' is not trusted.
0.888 ERROR: The certificate of 'archive.apache.org' hasn't got a known issuer.

To get around this, use wget --no-check-certificate https://archive.apache.org/dist/tomcat/tomcat-8/v8.5.3/bin/apache-tomcat-8.5.3.tar.gz instead.

alvinslee avatar Apr 17 '24 17:04 alvinslee