SSL Certificate Problem: Unable to get Local Issuer Certificate
Problem
Received SSL certificate problem: unable to get local issuer certificate error
when executing curl
request to a secure HTTPS destination.
Cause of the problem
If you get SSL certificate problem: unable to get local issuer certificate error, it's an indication that your root and intermediate certificates on the system are not working correctly or not set up correctly.
Solution
- Download the latest
cacert.pem
from https://curl.haxx.se/ca/cacert.pem - Add the
--cacert /path/to/cacert.pem
flag to the curl command to tell curl where the local Certificate Authority file is.
If you are using PHP:
Add the following line to the php.ini file or users.ini if you are on the shared hosting:
curl.cainfo="/path/to/downloaded/cacert.pem"
-
Solved: SSL_Error_rx_record_too_long
The usual cause is that the implementation of SSL on your server is not correct. The error is usually caused by a server-side problem which the server administrator will need to investigate.
Questions -
How to list all available CA SSL certificates on Ubuntu?
To list all available CA SSL certificates run the following lines of code:
Questions -
How to verify SSL certificates on the command line?
To validate an SSL certificate you can use one of the following approaches, depending on the type of the certificate.
Questions -
Solved: Invalid command ‘SSLEngine
This frequently happens on fresh Apache servers. When Apache starts it reads through the configuration files. When it encounters `SSLEngine` directive, it considers it as unknown. This is caused by the fact that the server’s basic configuration does not have `mod_ssl` module installed or enabled.
Questions
Make your mark
Join the writer's program
Are you a developer and love writing and sharing your knowledge with the world? Join our guest writing program and get paid for writing amazing technical guides. We'll get them to the right readers that will appreciate them.
Write for usBuild on top of Better Stack
Write a script, app or project on top of Better Stack and share it with the world. Make a public repository and share it with us at our email.
community@betterstack.comor submit a pull request and help us build better products for everyone.
See the full list of amazing projects on github