curl: (60) Peer’s Certificate issuer is not recognized.

Finally fixed it. Post the answer here as reference.

  • Export company trusted root certificate with .cer extension. Somthing naming external root certificate
  • Convert the ca file to .pem file using openssl x509 -in xxx.cer -inform der -outform pem -out xxx.pem

Then on the centos 7 os:

  • Install the ca-certificates package: yum install ca-certificates
  • Enable the dynamic CA configuration feature: update-ca-trust force-enable
  • Add the exported pem files to /etc/pki/ca-trust/source/anchors/
  • Use command: update-ca-trust extract

References:

https://support.ssl.com/Knowledgebase/Article/View/19/0/der-vs-crt-vs-cer-vs-pem-certificates-and-how-to-convert-them

http://manuals.gfi.com/en/kerio/connect/content/server-configuration/ssl-certificates/adding-trusted-root-certificates-to-the-server-1605.html

Leave a Comment