Certificate problems

Hi,

since 20210924-070000 there seems to be a problem with your servers certificate.

curl https://status.ocr.space
curl: (60) SSL certificate problem: unable to get local issuer certificate
More details here: https:// curl.haxx.se/ docs/ sslcerts.html
curl failed to verify the legitimacy of the server and therefore could not establish a secure connection to it. To learn more about this situation and how to fix it, please visit the web page mentioned above.

wget some_address_as_above
–2021-09-24 16:54:03–
https://status.ocr.space/ Resolving
status.ocr.space (status.ocr.space)… 140.82.63.111 Connecting to
status.ocr.space (status.ocr.space)|140.82.63.111|:443… connected.
ERROR: cannot verify status.ocr.space’s certificate, issued by “CN=R3,O=Let’s Encrypt,C=US”: Unable to locally verify the issuer’s authority. To connect to status.ocr.space insecurely, use `–no-check-certificate’.

An update of the local certificates
sudo update-ca-certificates -f -v
didn’t help

tested on Linux uschaurischuum
5.4.0-86-generic #97~18.04.1-Ubuntu SMP Sat Sep 18 03:11:22 UTC 2021 x86_64 x86_64 x86_64 GNU/Linux

and

Linux jim 5.4.0-86-generic #97-Ubuntu SMP Fri Sep 17 19:19:40 UTC 2021 x86_64 x86_64 x86_64 GNU/Linux

any ideas?

Thanks for your help.

Best regards, Man

temporarily switched to HTTP:

works for my problem…

1 Like

Unable to locally verify the issuer’s authority.

It seems CURL is having problems connecting to Let’sEncrypt, our certificate issuer.

The certificate itself looks good and is valid:

image

but it’s not only CURL. Same happens for WGET…

and happens on different (LINUX) operating systems.

It’s strange but wget and curl work on a Windows 10 box…
no problems at all :frowning:

Als bekannt inkompatibel nennt Let’s Encrypt unter anderem Blackberry vor 10.3.3, Android vor 2.3.6, Nintendo 3DS, Sony PS3 sowie PS4 vor Firmware 5.00. Keine Probleme bekommen sollen Geräte ab Windows XP/SP3, Android ab 7.1.1, macOS ab 10.12.1, iOS ab 10, Ubuntu ab 16.04, Debian ab Jessie sowie Java 7 ab 7u151 und Java 8 ab 8u141.

2 Likes

Thanks for the info - very interesting!

English info: Certificate Compatibility - Let's Encrypt