Unable to get local issuer certificate

Website, Application, Performance Security
1

Hi,
I am running my blog on WordPress with AWS Lightsail (recently moved from Linode), I am using Bitnami WordPress image for my Lightsail instance. my SSL working perfectly fine.
But after updating the WordPress to latest version I am no linger able to edit any of my themes as in the new version, WP introduce loopback requests to verify code stability while editing theme. And this is where I am getting error. I came to know this is actually caused by cURLwhile validating SSL certificate.
Error encountered: (0) cURL error 60: SSL certificate problem: unable to get local issuer certificate

Is there anyway to get the root certificate for CloudFlare Origin Certificates, I will place it in the trusted certificate store, and check. This might resolve the issue.

2

You can get that root certificate here:
https://support.cloudflare.com/hc/en-us/articles/115000479507-Managing-Cloudflare-Origin-CA-certificates#h_30cc332c-8f6e-42d8-9c59-6c1f06650639

2 Likes
3

Thank you for that link, I have added the certificate and now it looks like issue resolved partially.
If I validate it by checking with the CAPath, I am not getting any error.
openssl s_client -CApath /etc/ssl/certs/ -connect technochat.in:443

But if I remove the CApath, I am still getting error. So it is improved.

Any idea why it is not working with default CA path, and where i can configure the default CA path?

4

In Bitnami WP, it use different path to validate SSL, I have added the root certificate there, and this certificate validation issue resolved.

Path is : /opt/bitnami/common/openssl/certs/
But, original issue still there.

Anyone have any idea how to fix this cURL ssl error?
Error encountered: (0) cURL error 60: SSL certificate problem: unable to get local issuer certificate

1 Like
5

This topic was automatically closed after 30 days. New replies are no longer allowed.