SSL Certificate Problem: Unable to get Local Issuer Certificate

Problem

Received SSL certificate problem: unable to get local issuer certificate error when executing curl request to a secure HTTPS destination.

Cause of the problem

If you get SSL certificate problem: unable to get local issuer certificate error, it's an indication that your root and intermediate certificates on the system are not working correctly or not set up correctly.

Solution

1. Download the latest cacert.pem from https://curl.haxx.se/ca/cacert.pem
2. Add the --cacert /path/to/cacert.pem flag to the curl command to tell curl where the local Certificate Authority file is.

If you are using PHP:

Add the following line to the php.ini file or users.ini if you are on the shared hosting:

curl.cainfo="/path/to/downloaded/cacert.pem"

How to verify SSL certificates on the command line?

To validate an SSL certificate you can use one of the following approaches, depending on the type of the certificate.

Questions

How to list all available CA SSL certificates on Ubuntu?

To list all available CA SSL certificates run the following lines of code:

Questions

Solved: SSL_Error_rx_record_too_long

The usual cause is that the implementation of SSL on your server is not correct. The error is usually caused by a server-side problem which the server administrator will need to investigate.

Questions

Solved: Invalid command ‘SSLEngine

This frequently happens on fresh Apache servers. When Apache starts it reads through the configuration files. When it encounters `SSLEngine` directive, it considers it as unknown. This is caused by the fact that the server’s basic configuration does not have `mod_ssl` module installed or enabled.

Questions

This work is licensed under a Creative Commons Attribution-NonCommercial-ShareAlike 4.0 International License.