Shami's Blog

Since PHP 5.5 reached it’s end of life a while back I started upgrading my servers to PHP 5.6. This has caused some issues but the worst was:

error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed

This caused all encrypted communications to fail causing all kinds of grief. What I found strange was the fact I had already installed the ca_root_nss package which should contain the latest set of certificate authority certificates.

The solution is simple, taken from here

# Install ca_root_nss
pkg install ca_root_nss

# Update /etc/ssl/cert.pem
rm /etc/ssl/cert.pem
ln -s /usr/local/share/certs/ca-root-nss.crt /etc/ssl/cert.pem

# Restart php-fpm just in case
service php-fpm restart