ISPManager SSL certificate problem: unable to get local issuer certificate

Help
1

Hello!

I have troubles with domain https://on-washing.com.
The browser detected certificate as it is
but in console curl -I https://on-washing.com I have got an error

curl: (60) SSL certificate problem: unable to get local issuer certificate

More details here: https://curl.haxx.se/docs/sslcerts.html

curl failed to verify the legitimacy of the server and therefore could not
establish a secure connection to it. To learn more about this situation and
how to fix it, please visit the web page mentioned above.

Debian 9.11, ISPmanager Lite 5.299.0

2

This is the same issue as found in this other thread:

The server in question sends a fully invalid certificate chain. Modern browsers fix this on-the-fly, but non-browser (e.g curl) does not.

The server needs to send the chain as fetched by the ACME client. There's a severe misconfiguration on the server.

It is possible that your software (ISPmanager) is just out of date and needs updating, as Debian 9 is old.

1 Like
3

SSL labs concurs with @Nummer378, see:
https://www.ssllabs.com/ssltest/analyze.html?d=on-washing.com

1 Like
4

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.