Shami's Blog

Since PHP 5.5 reached it’s end of life a while back I started upgrading my servers to PHP 5.6. This has caused some issues but the worst was:

1error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed

This caused all encrypted communications to fail causing all kinds of grief. What I found strange was the fact I had already installed the ca_root_nss package which should contain the latest set of certificate authority certificates.

The solution is simple, taken from here

1# Install ca_root_nss
2pkg install ca_root_nss
3
4# Update /etc/ssl/cert.pem
5rm /etc/ssl/cert.pem
6ln -s /usr/local/share/certs/ca-root-nss.crt /etc/ssl/cert.pem
7
8# Restart php-fpm just in case
9service php-fpm restart