SSL Certificate Problem: Unable to get Local Issuer Certificate
Problem
Received SSL certificate problem: unable to get local issuer certificate error
when executing curl request to a secure HTTPS destination.
Cause of the problem
If you get SSL certificate problem: unable to get local issuer certificate error, it's an indication that your root and intermediate certificates on the system are not working correctly or not set up correctly.
Solution
- Download the latest
cacert.pemfrom https://curl.haxx.se/ca/cacert.pem - Add the
--cacert /path/to/cacert.pemflag to the curl command to tell curl where the local Certificate Authority file is.
If you are using PHP:
Add the following line to the php.ini file or users.ini if you are on the shared hosting:
curl.cainfo="/path/to/downloaded/cacert.pem"
This work is licensed under a Creative Commons Attribution-NonCommercial-ShareAlike 4.0 International License.
-
How to list all available CA SSL certificates on Ubuntu?
To list all available CA SSL certificates run the following lines of code:
Questions -
How to verify SSL certificates on the command line?
To validate an SSL certificate you can use one of the following approaches, depending on the type of the certificate.
Questions -
Solved: Invalid command ‘SSLEngine
This frequently happens on fresh Apache servers. When Apache starts it reads through the configuration files. When it encounters `SSLEngine` directive, it considers it as unknown. This is caused by the fact that the server’s basic configuration does not have `mod_ssl` module installed or enabled.
Questions -
Solved: SSL_Error_rx_record_too_long
The usual cause is that the implementation of SSL on your server is not correct. The error is usually caused by a server-side problem which the server administrator will need to investigate.
Questions