Unable to get local issuer certificate

If you run tt-rss on an officially unsupported platform (shared hosting, Windows, etc.) post here
giovi
Bear Rating Trainee
Bear Rating Trainee
Posts: 15
Joined: 20 Nov 2013, 17:35

Unable to get local issuer certificate

Postby giovi » 14 Nov 2015, 18:23

When I try to subscribe to a certain feed I get the following error:
"Couldn't download the specified URL: 60 SSL certificate problem: unable to get local issuer certificate"
The feed provides a self signed certificate.
Any idea on what could be the cause?

User avatar
fox
^ me reading your posts ^
Posts: 6318
Joined: 27 Aug 2005, 22:53
Location: Saint-Petersburg, Russia
Contact:

Re: Unable to get local issuer certificate

Postby fox » 14 Nov 2015, 18:43

idk maybe try reading the error message

Foo Bar
Bear Rating Trainee
Bear Rating Trainee
Posts: 4
Joined: 17 Aug 2015, 01:29

Re: Unable to get local issuer certificate

Postby Foo Bar » 14 Nov 2015, 21:19

Hi,

it seems that you don't have your self signed cert in your trusted certifecate store. You have three options then:
1. Use only http
2. Get a signed cert (maybe upcomming let's encrypt)
3. add the certificate to your trusted certs (viewtopic.php?f=1&t=3468&p=20730&hilit=certificate#p20730)

Hope that helps

jamesbond
Bear Rating Trainee
Bear Rating Trainee
Posts: 11
Joined: 12 Aug 2013, 01:42

Re: Unable to get local issuer certificate

Postby jamesbond » 14 Feb 2016, 01:47

I have two feeds showing this error message. When trying to fetch the feed manually with curl, I discovered that it works on my home machine (running Archlinux) and fails on my virtual server (running Debian 8.3 with all available updates).

Some friendly guy on another forums pointed me to this, which may be the cause of the problem:

#812708 - ca-certificates: on fresh debian install typical ssl session fails on Thawte certificates - Debian Bug report logs

Maybe others can confirm or deny this possibility.

rom
Bear Rating Trainee
Bear Rating Trainee
Posts: 5
Joined: 07 Jul 2013, 17:25

Re: Unable to get local issuer certificate

Postby rom » 16 Dec 2016, 01:17

jamesbond wrote:Maybe others can confirm or deny this possibility.

I can fully confirm this possibility. I have the very same problem (60 SSL certificate problem: unable to get local issuer certificate) while trying to get feeds from https://heise.de since updating to Debian 8.3 - the website is using Thawte certificates as mentioned in the link you are refering to.

paulo.david
Bear Rating Trainee
Bear Rating Trainee
Posts: 2
Joined: 16 Dec 2016, 02:22

Re: Unable to get local issuer certificate

Postby paulo.david » 16 Dec 2016, 02:27

rom wrote:I can fully confirm this possibility. I have the very same problem (60 SSL certificate problem: unable to get local issuer certificate) while trying to get feeds from https://heise.de since updating to Debian 8.3 - the website is using Thawte certificates as mentioned in the link you are refering to.


True, but as you may have seen, a lot of water went under the bridge on that bug, in the mean time. It says it actually pertained to openssl and that the bug has been fixed in May. Your best bet may be to install openssl from the backports repository, which should fix the problem:

https://packages.debian.org/jessie-backports/openssl
https://bugs.debian.org/cgi-bin/bugrepo ... bug=774882

rom
Bear Rating Trainee
Bear Rating Trainee
Posts: 5
Joined: 07 Jul 2013, 17:25

Re: Unable to get local issuer certificate

Postby rom » 16 Dec 2016, 09:26

Thank you, paulo.david


Return to “Unsupported platforms”

Who is online

Users browsing this forum: No registered users and 2 guests