The server https://w3s.webmoney.ru:443 is not trustworthy.
% curl https://w3s.webmoney.ru:443
curl: (60) server certificate verification failed. CAfile: /etc/ssl/certs/ca-certificates.crt CRLfile: none
More details here: http://curl.haxx.se/docs/sslcerts.html
curl performs SSL certificate verification by default, using a "bundle"
of Certificate Authority (CA) public keys (CA certs). If the default
bundle file isn't adequate, you can specify an alternate file
using the --cacert option.
If this HTTPS server uses a certificate signed by a CA represented in
the bundle, the certificate verification probably failed due to a
problem with the certificate (it might be expired, or the name might
not match the domain name in the URL).
If you'd like to turn off curl's verification of the certificate, use
the -k (or --insecure) option.
Run
curl --insecure https://w3s.webmoney.ru:443
and it works.
From man curl
-k, --insecure
(SSL) This option explicitly allows curl to perform "insecure" SSL
connections and transfers. All SSL connections are attempted to be
made secure by using the CA certificate bundle installed by
default. This makes all connections considered "insecure" fail unless
-k, --insecure is used.
Add trusted certificates with
Add the path to the certificate to
/etc/ca-certificates.conf
use a path relative to /usr/share/ca-certificates
Run sudo update-ca-certificates
For further instructions read man update-ca-certificates
Taken from the comments:
FYI: The same site has SSLv3 and SSLv2 enabled - it's BAD and not trustworthy at all because of that
apt-cache policy curl
curl
command? Which protocols are supported by the target server? Is your key expired?curl: (60) server certificate verification failed. CAfile: /etc/ssl/certs/ca-certificates.crt CRLfile: none