I get this issue on my wordpress website. "Error: cURL error 60: SSL certificate problem: unable to get local issuer certificate" How to solve this? I am using Let's encrypt. I also tried Cloudflare ssl and I get the same errorr

Hello, is it possible to solve the problem by trying to update ca-certificates? Aap_Sidney

Centos: sudo yum update ca-certificates Ubuntu: sudo apt update sudo apt install --reinstall ca-certificates if(window.hljsLoader && !document.currentScript.parentNode.hasAttribute('data-s9e-livepreview-onupdate')) { window.hljsLoader.highlightBlocks(document.currentScript.parentNode); }

aaPanel_Kern sudo apt update Hit:1 http://asi-fs-d.contabo.net/ubuntu jammy InRelease Get:2 http://asi-fs-d.contabo.net/ubuntu jammy-updates InRelease [128 kB] Get:3 http://asi-fs-d.contabo.net/ubuntu jammy-backports InRelease [127 kB] Get:5 http://security.ubuntu.com/ubuntu jammy-security InRelease [129 kB] Hit:4 https://rspamd.com/apt-stable jammy InRelease Get:6 http://asi-fs-d.contabo.net/ubuntu jammy-updates/main amd64 Packages [2,180 kB] Get:7 http://asi-fs-d.contabo.net/ubuntu jammy-updates/main i386 Packages [729 kB] Get:8 http://asi-fs-d.contabo.net/ubuntu jammy-updates/universe i386 Packages [751 kB] Get:9 http://asi-fs-d.contabo.net/ubuntu jammy-updates/universe amd64 Packages [1,177 kB] Get:10 http://security.ubuntu.com/ubuntu jammy-security/main i386 Packages [567 kB] Get:11 http://security.ubuntu.com/ubuntu jammy-security/main amd64 Packages [1,956 kB] Get:12 http://security.ubuntu.com/ubuntu jammy-security/universe i386 Packages [647 kB] Get:13 http://security.ubuntu.com/ubuntu jammy-security/universe amd64 Packages [957 kB] Fetched 9,347 kB in 2s (5,539 kB/s) Reading package lists... Done Building dependency tree... Done Reading state information... Done 10 packages can be upgraded. Run 'apt list --upgradable' to see them. root@vmi4414703:~# sudo apt install --reinstall ca-certificates Reading package lists... Done Building dependency tree... Done Reading state information... Done The following packages were automatically installed and are no longer required: liblockfile-bin liblockfile1 lockfile-progs sendmail-base sensible-mda Use 'sudo apt autoremove' to remove them. 0 upgraded, 0 newly installed, 1 reinstalled, 0 to remove and 10 not upgraded. Need to get 0 B/162 kB of archives. After this operation, 0 B of additional disk space will be used. Preconfiguring packages ... (Reading database ... 95209 files and directories currently installed.) Preparing to unpack .../ca-certificates_20240203 22 .04.1_all.deb ... Unpacking ca-certificates (20240203 22 .04.1) over (20240203 22 .04.1) ... Setting up ca-certificates (20240203 22 .04.1) ... Updating certificates in /etc/ssl/certs... 0 added, 0 removed; done. Processing triggers for man-db (2.10.2-1) ... Processing triggers for ca-certificates (20240203 22 .04.1) ... Updating certificates in /etc/ssl/certs... 0 added, 0 removed; done. Running hooks in /etc/ca-certificates/update.d... done. root@vmi4414703:~# apt list --upgradable Listing... Done libpq-dev/jammy-updates,jammy-security 14.15-0ubuntu0.22.04.1 amd64 [upgradable from: 14.13-0ubuntu0.22.04.1] libpq5/jammy-updates,jammy-security 14.15-0ubuntu0.22.04.1 amd64 [upgradable from: 14.13-0ubuntu0.22.04.1] libudev1/jammy-updates 249.11-0ubuntu3.12 amd64 [upgradable from: 249.11-0ubuntu3] linux-generic/jammy-updates 5.15.0.126.125 amd64 [upgradable from: 5.15.0.25.27] linux-headers-generic/jammy-updates 5.15.0.126.125 amd64 [upgradable from: 5.15.0.25.27] linux-image-generic/jammy-updates 5.15.0.126.125 amd64 [upgradable from: 5.15.0.25.27] python3-update-manager/jammy-updates,jammy-updates 1:22.04.21 all [upgradable from: 1:22.04.9] ubuntu-advantage-tools/jammy-updates,jammy-updates 34 22 .04 amd64 [upgradable from: 27.7 22 .04.1] udev/jammy-updates 249.11-0ubuntu3.12 amd64 [upgradable from: 249.11-0ubuntu3] update-manager-core/jammy-updates,jammy-updates 1:22.04.21 all [upgradable from: 1:22.04.9]

I tried and still get error. "Erreur : cURL error 60: SSL certificate problem: unable to get local issuer certificate."

Hello, try to modify the configuration of PHP, and then restart PHP and web services Add or modify the following lines curl.cainfo = "/etc/ssl/certs/ca-certificates.crt" Aap_Sidney

aaPanel_Kern How do I do this? here?

aaPanel_Kern I have added and restarted service but it is still the same

Do you want to restart the web service?

Error: cURL error 60: SSL certificate problem

Aap_Sidney

aaPanel_Kern I have reinstalled the server and installed cloudflare ssl and I still get error above. I think the system is failing to issue a local certificate. I tried with another domain on CPANEL, it does not have this error. So I have concluded, it is aapanel issue.

Last login: Thu Dec 5 05:04:30 2024 from 151.115.36.250
root@vmi2514703:~# openssl s_client -connect chine.xxx.com:443 -showcerts
CONNECTED(00000003)
depth=0 O = "CloudFlare, Inc.", OU = CloudFlare Origin CA, CN = CloudFlare Origin Certificate
verify error:num=20:unable to get local issuer certificate
verify return:1
depth=0 O = "CloudFlare, Inc.", OU = CloudFlare Origin CA, CN = CloudFlare Origin Certificate
verify error:num=21:unable to verify the first certificate

verify return:1

Certificate chain
0 s😮 = "CloudFlare, Inc.", OU = CloudFlare Origin CA, CN = CloudFlare Origin Certificate
i:C = US, O = "CloudFlare, Inc.", OU = CloudFlare Origin SSL Certificate Authority, L = San Francisco, ST = California

aaPanel_Kern

Hello, your website has a CF response certificate, not aapanel’s nginx.

Aap_Sidney

aaPanel_Kern I am using apache not ngix and I run this command. The website is new wordpress with cloudflare ssl installed.

aaPanel_Kern

Hello, your website has a CF response certificate, not aapanel’s nginx/apache/openlitespeed.

Aap_Sidney

aaPanel_Kern what is CF and how do I solve it? because I also used zero ssl and lets encrypt

aaPanel_Kern

Suggest you try updating your local computer's certificate?

Aap_Sidney

« Previous Page