Page 1 of 1

Unable to get local issuer certificate

Posted: 14 Nov 2015, 18:23
by giovi
When I try to subscribe to a certain feed I get the following error:
"Couldn't download the specified URL: 60 SSL certificate problem: unable to get local issuer certificate"
The feed provides a self signed certificate.
Any idea on what could be the cause?

Re: Unable to get local issuer certificate

Posted: 14 Nov 2015, 18:43
by fox
idk maybe try reading the error message

Re: Unable to get local issuer certificate

Posted: 14 Nov 2015, 21:19
by Foo Bar
Hi,

it seems that you don't have your self signed cert in your trusted certifecate store. You have three options then:
1. Use only http
2. Get a signed cert (maybe upcomming let's encrypt)
3. add the certificate to your trusted certs (viewtopic.php?f=1&t=3468&p=20730&hilit=certificate#p20730)

Hope that helps

Re: Unable to get local issuer certificate

Posted: 14 Feb 2016, 01:47
by jamesbond
I have two feeds showing this error message. When trying to fetch the feed manually with curl, I discovered that it works on my home machine (running Archlinux) and fails on my virtual server (running Debian 8.3 with all available updates).

Some friendly guy on another forums pointed me to this, which may be the cause of the problem:

#812708 - ca-certificates: on fresh debian install typical ssl session fails on Thawte certificates - Debian Bug report logs

Maybe others can confirm or deny this possibility.

Re: Unable to get local issuer certificate

Posted: 16 Dec 2016, 01:17
by rom
jamesbond wrote:Maybe others can confirm or deny this possibility.

I can fully confirm this possibility. I have the very same problem (60 SSL certificate problem: unable to get local issuer certificate) while trying to get feeds from https://heise.de since updating to Debian 8.3 - the website is using Thawte certificates as mentioned in the link you are refering to.

Re: Unable to get local issuer certificate

Posted: 16 Dec 2016, 02:27
by paulo.david
rom wrote:I can fully confirm this possibility. I have the very same problem (60 SSL certificate problem: unable to get local issuer certificate) while trying to get feeds from https://heise.de since updating to Debian 8.3 - the website is using Thawte certificates as mentioned in the link you are refering to.


True, but as you may have seen, a lot of water went under the bridge on that bug, in the mean time. It says it actually pertained to openssl and that the bug has been fixed in May. Your best bet may be to install openssl from the backports repository, which should fix the problem:

https://packages.debian.org/jessie-backports/openssl
https://bugs.debian.org/cgi-bin/bugrepo ... bug=774882

Re: Unable to get local issuer certificate

Posted: 16 Dec 2016, 09:26
by rom
Thank you, paulo.david