Форум

How to summon a support and\or moderator here?

I have same problem on:

OS: BigSur 11.1
PlayOnMac: 4.4.2

P.S. First message in this topic 21 August 2020.

What is the exact problem?

On catalina, you won't find much versions

We can install only system version of wine.

Some very old soft doesnt want work with this version.

This is the problem. Also on some Linux distros.

Short version: The intermediate CA certificate of Letsencrypt is not available and the used libs in PlayonLinux/Mac reject downloading from a server with SSL + Letsencrypt certificate.

I have the same issue on Linux, POL 4.3.4. I'm trying again and again for one hour now...

Quote from bitone

I found the solution for this issue (at least on Linux). The problem is that the certificate of the packages website can't be verified.

 

As a workaround you can disable the verification in Python like that (i.e. start POL from a console):

~$ env PYTHONHTTPSVERIFY=0  playonlinux

---

The "real" fix:

The source of all these issues is the "Let's Encrypt" SSL certificate of the referred website. To verify this certificate a so called intermediate CA certificate (cacert) is needed, which is missing in the linux distribution.

To solve this we have to do two things:

1. Install te missing CA certificate
2. Tell python and wget to use the system wide CA certs

Download the CA certificate from here: https://letsencrypt.org/certs/lets-encrypt-x3-cross-signed.pem and rename it to lets-encrypt-x3-cross-signed.crt

Make a new folder if not available (as root):

sudo mkdir /usr/share/ca-certificates/extra

Move the certificate into this folder.

Update the system wide CA certs:

sudo dpkg-reconfigure ca-certificates

You can start POL now with:

env SSL_CERT_DIR=/etc/ssl/certs playonlinux

We see the list of wine versions, but we still can't install them because wget also needs the intermediate CA certificate.

For some reason wget ignores SSL_CERT_DIR and I found only one way to determine where it looks for certificates:

strace wget -q --prefer-family=IPv4 https://phoenicis.playonlinux.com/index.php/wine?os=linux -O- 2>&1 | grep ssl

stat("/usr/local/ssl/certs/4f06f81d.0"

So, wget looks for the certs in /usr/local/ssl/certs/

To make wget accept the Let's Encryt certificate, we copy intermediate CA cert to this folder:

cp -P /etc/ssl/certs/4f06f81d.0 /etc/ssl/certs/lets-encrypt-x3-cross-signed.pem /usr/local/ssl/certs/

(-P = do not dereference links)

That's it!

At least this how it works on Ubuntu 20.04.

 

Quote from bitone

I see.

Thanks for the explanation. However, I cannot reproduce this problem on macOS. Are you sure that it is the same issue on mac?

 

I see.

Thanks for the explanation. However, I cannot reproduce this problem on macOS. Are you sure that it is the same issue on mac?

 

Quote from Tinou

<urlopen error [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1108)>

Quote from illunic

what i do wrong?

I cant instal any other versions, only system...

Edited by BlaZz

The image does not work :)

On Catalina, only one version is available

In case you weren't aware: Different OS X installers have different certificates bundled. E.g. a 10.13.6 installer from 2018 will have different certs than an 10.13.6 installer loaded from apples servers in 2022.

I tried everything suggested in this thread, but nothing seems to work. I tried exporting the PYTHONHTTPSVERIFY=0 into shell and launching POM from terminal -> no luck.

( https://web.archive.org/web/20200213195325/https://georgekarapi.com/2020/02/01/fix-playonlinux-wine-package-website-is-unavailable-error/ )

I tried adding #export PYTHONHTTPSVERIFY=0 as well as export PYTHONHTTPSVERIFY=0 into playonmac within Contents/MacOS folder -> no luck.

I tried adding all certificates from let's encrypt that I could find (E1, E2, R3, R4, ISRG X1, I also had those installed prior already) -> no luck.

I tried exporting all certificates from a Monterey install using Keychain Access and importing that into 10.13.6 -> no luck.

What a shame, I have 14 apps successfully installed into POM, but now it's useless because of security fud drama. What a damn shame.