Open rtest12 opened 1 year ago
After several re-installations, I finally succeeded, although I'm not sure of the reason for this error. Although I did the installation without sudo, when I was generating the website certificate, I didn't have the permission to create a file in the current directory, so I elevated the permissions through sudo. After issuing the certificates in the /tmp folder, everything worked. But I'm not sure if this was the actual reason, although no other conditions were changed.
After a couple more experiments, yes, this is the reason.
I had a similar issue, SEC_ERROR_UNKNOWN_ISSUER
from the following (non-sudo) commands:
mkcert -install
mkcert localhost
I was using mkcert v1.4.3, but upgrading to the latest v1.4.4-1-g1c1dc4e (I built from source) fixed the issue. Probably because I am using the Firefox snap, which support was added for in v1.4.4
Environment
mkcert -version
): v1.4.4What you did
I installed it and it seems to be fine, it put the certificate in dirs:
mkcert -CAROOT
/home/maxim/.local/share/mkcert
The check to see if the certificate is added to the root passed successfully:
openssl verify -verbose -CAfile /etc/ssl/certs/ca-certificates.crt /home/maxim/.local/share/mkcert/rootCA.pem /home/maxim/.local/share/mkcert/rootCA.pem: OK
It also appeared in the root certificates of Firefox.I generated certs for my local sites, assigned them to www-data user, and added links to the nginx config.
What went wrong
Firefox sees the certificate, but there is an error:
SEC_ERROR_UNKNOWN_ISSUER
In curl too:SSL certificate problem: unable to get local issuer certificate
curl log
testssl output: (NOT ok chain incomplete error)