CentOS 7 更新根证书(root certificates)

分类:技术 4.5k浏览

受最近 Let’sEncrypt 曾经的根证书DST Root X3过期影响,导致系统后端连接使用 Let’sEncrypt 证书的网址提示以下证书过期错误:

curl: (60) SSL certificate problem: certificate has expired

More details here: https://curl.haxx.se/docs/sslcerts.html

curl failed to verify the legitimacy of the server and therefore could not

establish a secure connection to it. To learn more about this situation and

how to fix it, please visit the web page mentioned above.

解决方法:

yum install ca-certificates

update-ca-trust force-enable

update-ca-trust extract

安装并强制更新证书后即可。