Mailing List Archive: unable to get local issuer certificate cert

unable to get local issuer certificate cert

exim-users at exim

Jun 14, 2018, 6:56 PM

Post #1 of 2 (117 views)

I'm using self signed certificate with my exim. Every time my exim in
sending email (outgoing email) it logs error like

SSL verify error: depth=1 error=unable to get local issuer
certificate cert=/C=US/O=DigiCert Inc/OU=www.digicert.com/CN=DigiCert
SHA2 High Assurance Server CA

Its the same error for every receiver and I belive error is about my
certificate not remote one. Emails get delivered without problems
though. How can I either fix it or disable logging of this error.

--
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

Re: unable to get local issuer certificate cert [ In reply to ]

exim-users at exim

Jun 14, 2018, 8:14 PM

Post #2 of 2 (117 views)

On 2018-06-15 at 03:56 +0200, krzf83@gmail.com via Exim-users wrote:
> SSL verify error: depth=1 error=unable to get local issuer
> certificate cert=/C=US/O=DigiCert Inc/OU=www.digicert.com/CN=DigiCert
> SHA2 High Assurance Server CA
>
> Its the same error for every receiver and I belive error is about my
> certificate not remote one.

You're missing a system certificate trust store, so Exim can't verify
certs. See the documentation for the "tls_verify_certificates" option.

-Phil

--
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/