Since PHP 5.5 reached it’s end of life a while back I started upgrading my servers to PHP 5.6. This has caused some issues but the worst was:
error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed
This caused all encrypted communications to fail causing all kinds of grief. What I found strange was the fact I had already installed the ca_root_nss package which should contain the latest set of certificate authority certificates.
The solution is simple, taken from here
# Install ca_root_nss pkg install ca_root_nss # Update /etc/ssl/cert.pem rm /etc/ssl/cert.pem ln -s /usr/local/share/certs/ca-root-nss.crt /etc/ssl/cert.pem # Restart php-fpm just in case service php-fpm restart