CentOS 5 CA Certificate Bundle Update - Raymii.org

Posted . Visible to the public.

If you get errors such as error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed while accessing ... and you're running an older version of CentOS, e.g. 5 or 5.5 then it's likely to be caused by the site certificate not being signed by one of the authorities in the default bundle.

You simply need to update the bundle as follows:

Back up old bundle

cp /etc/pki/tls/certs/ca-bundle.crt /etc/pki/tls/certs/ca-bundle.crt.bak

Copy bundle from cURL site

wget -O /etc/pki/tls/certs/ca-bundle.crt http://curl.haxx.se/ca/cacert.pem

Andy Henson
Posted by Andy Henson to Foxsoft (2015-06-24 11:50)