cURL 60 Error - Unable to pull information from .xml file from my website

Issues related to applications and software problems
Post Reply
janv1
Posts: 2
Joined: 2019/10/01 16:51:30

cURL 60 Error - Unable to pull information from .xml file from my website

Post by janv1 » 2019/10/01 17:31:08

Hello,

I have been having "curl: (60) Peer certificate cannot be authenticated with known CA certificates" whenever I use the curl command to pull the data from our websites

cURL https://hostname/resource.xml
curl: (60) Peer certificate cannot be authenticated with known CA certificates
More details here: http://curl.haxx.se/docs/sslcerts.html

I have done the following to troubleshoot:
1. Made sure the time/date is correct on the server
2. Made sure that Apache configuration is correct
3. Installed and updated ca-certificates (source: https://stackoverflow.com/questions/476 ... recognized)
4. Updated the cacert.pem on php.ini (source: https://stackoverflow.com/questions/298 ... ertificate)

when trying "curl http://www.example.com/ca/cacert.pem", it works!
but when trying "curl https://myhostname/resource" it does not work...

At our organization, we have about 9 websites and they all have their own certificates and keys. We are in the process of placing a multi-domain san cert in process. However, getting this issue resolved is pressing and urgent.

I am assuming that there is an SSL validity issue with my website, but I have tried everything imaginable in order to troubleshoot. Any help is appreciated.

Whoever
Posts: 1361
Joined: 2013/09/06 03:12:10

Re: cURL 60 Error - Unable to pull information from .xml file from my website

Post by Whoever » 2019/10/02 02:48:34

Without the URL to your actual website, you are not going to get more than guesses.

1. Is there a certificate chain that you need to install?
2. Is there any indication of a problem in your logs?

janv1
Posts: 2
Joined: 2019/10/01 16:51:30

Re: cURL 60 Error - Unable to pull information from .xml file from my website

Post by janv1 » 2019/10/09 14:25:12

Thank you for responding! I was able to resolve this issue by using the intermediate certificate to complete the chain.

Post Reply