BEA-090487: The peer is rejecting the certificate chain as being untrusted or incomplete

I see some errors like:

BEA-090487: UNKNOWN_CA alert received from 1.1.1.1 . The peer is rejecting the certificate chain as being untrusted or incomplete

The doc says:

Warning: UNKNOWN_CA alert received from peer. The peer is rejecting the certificate chain as being untrusted or incomplete.

Description
The certificate chain was not trusted by the peer.

Cause
The peer is not configured to trust the CA that signed the certificate chain.

Action
Review the certificate chain and the peer trusted CA configuration to determine whether the peer should be trusting the certificate chain or whether a new certificate chain is required that is trusted by the peer.



From the HTTP access logs, I discovered that someone hit our HTTP service with a browser which was not trusting our certificate... so the solution is simply add a security exception in the browser.

wget for Windows

If you are stranded on a Windows machine and you need to do a wget, you will be horrified to discover that there is not such tool.
Here http://nyquist212.wordpress.com/2013/09/23/powershell-webclient-example/ they show how to use PowerShell to emulate the command.
For me, this simple code worked:
run PowerShell,

Function Get-Webclient ($url, $out) {
 $request = New-Object System.Net.WebCLient
 $request.DownloadFile($url, $out)
}

Get-Webclient "http://www.google.com" "C:\tmp\Foo3.txt"

Windows is so pathetic that if I were a Microsoft developer I would pretend I work serving fries in a Mac Donald to avoid being shunned by my neighbors...

George Carlin and the Freak Show

One of the greatest philosophers - unfortunately no longer living.