Unable to get local issuer certificate

[giovi]

When I try to subscribe to a certain feed I get the following error:
"Couldn't download the specified URL: 60 SSL certificate problem: unable to get local issuer certificate"
The feed provides a self signed certificate.
Any idea on what could be the cause?

[fox]

idk maybe try reading the error message

[Foo Bar]

Hi,

it seems that you don't have your self signed cert in your trusted certifecate store. You have three options then:
1. Use only http
2. Get a signed cert (maybe upcomming let's encrypt)
3. add the certificate to your trusted certs (viewtopic.php?f=1&t=3468&p=20730&hilit=certificate#p20730)

Hope that helps

[jamesbond]

I have two feeds showing this error message. When trying to fetch the feed manually with curl, I discovered that it works on my home machine (running Archlinux) and fails on my virtual server (running Debian 8.3 with all available updates).

Some friendly guy on another forums pointed me to this, which may be the cause of the problem:

#812708 - ca-certificates: on fresh debian install typical ssl session fails on Thawte certificates - Debian Bug report logs

Maybe others can confirm or deny this possibility.

[rom]

Maybe others can confirm or deny this possibility.

I can fully confirm this possibility. I have the very same problem (60 SSL certificate problem: unable to get local issuer certificate) while trying to get feeds from https://heise.de since updating to Debian 8.3 - the website is using Thawte certificates as mentioned in the link you are refering to.

[paulo.david]

I can fully confirm this possibility. I have the very same problem (60 SSL certificate problem: unable to get local issuer certificate) while trying to get feeds from https://heise.de since updating to Debian 8.3 - the website is using Thawte certificates as mentioned in the link you are refering to.

True, but as you may have seen, a lot of water went under the bridge on that bug, in the mean time. It says it actually pertained to openssl and that the bug has been fixed in May. Your best bet may be to install openssl from the backports repository, which should fix the problem:

https://packages.debian.org/jessie-backports/openssl
https://bugs.debian.org/cgi-bin/bugrepo ... bug=774882

[rom]

Thank you, paulo.david