I have a site that uses letsencrypt certificates and this morning I started getting certificate verify failed (unable to get local issuer certificate) errors when making calls to it from an Ubuntu 18.04 server. There doesn't appear to be anything wrong with the certificate, as I'm not having problem…

I know we do have our own local CA that we had setup for self-signing certs. But I'm not sure how to verify if it got installed into ca-certificates or not. I thought we were just referencing it manually when needed.

There are still 969 bytes unaccounted for: 200082 -199113 ======= 969

[image] rg305: ls -l /usr/local/share/ca-certificates/ It's empty now, but I did have two in there before when the file size was 202781.

apt update Hit:1 https://deb.nodesource.com/node_10.x bionic InRelease Hit:2 http://us.archive.ubuntu.com/ubuntu bionic InRelease Get:3 http://security.ubuntu.com/ubuntu bionic-security InRelease [88.7 kB] Hit:4 http://us.archive.ubuntu.com/ubuntu bionic-updates InRelease Get:5 http://us.archive.ubu…

Just for clarification (for both @andyrue and @rg305 ): While the ca-certificates package (on Debian/Ubuntu) ships a bunch of inbuild root certificates (from Mozillas trust store), it is possible to configure all trust with this package, e.g you can add/remove (custom) certificates. It also support…

If anyone got here regarding the Letsencrypt DST Root CA X3 expired (september 30) : DO NOT RUN apt purge ca-certificates This will literally remove certbot from your system and all ssl certificates generated by certbot. If you have multiple vhosts on yout machine using letsencrypt as certificate,…

[image] paezguga: force the renewal: sudo certbot renew --force-renewal --preferred-chain "ISRG Root X1" Please note that forcing renewal IS NOT NECESSARY but only adds to the already increased load on the Let's Encrypt servers. While I agree that this is the most easy way to change the ce…

[image] rg305: apt install ca-certificates What did you purge?

Do you know how to reset all that and get the latest ones properly? My server is unable to connect to Letsencrypt sites. wget https://letsencrypt.org/certs/isrgrootx1.der --2021-10-02 00:10:13-- https://letsencrypt.org/certs/isrgrootx1.der Resolving letsencrypt.org (letsencrypt.org)... 67.207.81.…

Can't verify certificates issued by letsencrypt

Help

Topic		Replies	Views
[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed Help	10	5757	January 21, 2022
I can never renew my certificate Help	31	1808	January 20, 2024
Previously working connection to LE now fails- related to recent root cert exp.? Help	50	2848	October 11, 2021
Ubuntu 18.04 and wget error cannot verify certificate Help	22	14063	November 20, 2021
Problem with certificate has expired Help	27	25856	October 6, 2021

Can't verify certificates issued by letsencrypt

Related topics