We have moved to a new Sailfish OS Forum. Please start new discussions there.

Revision history [back]

click to hide/show revision 1
initial version

posted 2015-05-14 13:45:21 +0200

SSL problems after upgrading to 1.1.4.29

Hey guys and gals!

Since the last update I'm facing problems with SSL mostly when trying to update stuff from warehouse. When I want to install/update something I always get

Status: repo-not-available

Extra details:

Download (curl) error for 'http://...'

Error code: Unrecognized error

Error message: SSL certificate problem:

unable to get local issuer certificate

I tried to use curl manually and connect to some pages, none work with SSL:

[nemo@Jolla ~]$ curl https://www.google.de curl: (60) SSL certificate problem: unable to get local issuer certificate More details here: http://curl.haxx.se/docs/sslcerts.html

I tried to install the CA root certificate again (as described here: https://together.jolla.com/question/2949/where-can-i-add-a-system-ca-certificate/ and with https://openrepos.net/content/p2501/certificate-manager) but that didn't change anything. When I try

openssl s_client -connect www.google.de:443 -CApath /etc/pki/tls/certs

like described in the link I get

Verify return code: 0 (ok)

but with

openssl s_client -connect www.google.de:443

I get

Verify return code: 20 (unable to get local issuer certificate)

When I disable all the warehouse-repositories I can update perfectly using pkcon.

I'm not really an SSL expert so maybe I'm making a stupid mistake... I tried for days now but I'm really stumped - I hope you can help me :)

Thanks in advance

[solved] SSL problems after upgrading to 1.1.4.29

Hey guys and gals!

Since the last update I'm facing problems with SSL mostly when trying to update stuff from warehouse. When I want to install/update something I always get

Status: repo-not-available

Extra details:

Download (curl) error for 'http://...'

Error code: Unrecognized error

Error message: SSL certificate problem:

unable to get local issuer certificate

I tried to use curl manually and connect to some pages, none work with SSL:

[nemo@Jolla ~]$ curl https://www.google.de curl: (60) SSL certificate problem: unable to get local issuer certificate More details here: http://curl.haxx.se/docs/sslcerts.html

I tried to install the CA root certificate again (as described here: https://together.jolla.com/question/2949/where-can-i-add-a-system-ca-certificate/ and with https://openrepos.net/content/p2501/certificate-manager) but that didn't change anything. When I try

openssl s_client -connect www.google.de:443 -CApath /etc/pki/tls/certs

like described in the link I get

Verify return code: 0 (ok)

but with

openssl s_client -connect www.google.de:443

I get

Verify return code: 20 (unable to get local issuer certificate)

When I disable all the warehouse-repositories I can update perfectly using pkcon.

I'm not really an SSL expert so maybe I'm making a stupid mistake... I tried for days now but I'm really stumped - I hope you can help me :)

Thanks in advance