Openssl unable to get local issuer certificate

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Openssl unable to get local issuer certificate

1,754 Views
sagar_sakre
Contributor I

I am trying to get azure working on imx7sabre dual board. I've followed instructions mentioned in https://www.nxp.com/docs/en/user-guide/i.MX_Yocto_Project_User's_Guide_Linux.pdf to setup the BSP and get the shell on the board.

I've added meta-iot-cloud layer and succesfully built it. When running SimulateDevice.py (given in azure package) I get below error,

SSL routines:ssl3_get_server_certificate:certificate verify failed

The same code works perfectly on my ubuntu 16.04 machine. Upon searching I found that it is related to openssl certificate error. When I do openssl s_client -showcerts -connect google.com:443 I get the below error 

unable to get local issuer certificate

Again the same command "openssl s_client -showcerts -connect google.com:443" Works well on the ubuntu machine.

A lot of people reported similar issue but there's no concrete solution. Can anybody guide me how to fix this issue?

I've attached the full error log here

Labels (1)
0 Kudos
Reply
3 Replies

1,321 Views
Yuri
NXP Employee
NXP Employee

Hello,

  please let me know more details how to reproduce the issue.

Regards,

Yuri.

0 Kudos
Reply

1,321 Views
sagar_sakre
Contributor I

Hi Yuri, you can reproduce this issue by enabling openssl in the image package and run

openssl s_client -showcerts -connect google.com:443

on imx7 board to quickly reproduce this issue.

0 Kudos
Reply

1,321 Views
Yuri
NXP Employee
NXP Employee

Hello,

   I managed to reproduce the issue, but I am afraid if it possible to find a solution

in the nearest future.

Regards,

Yuri.

0 Kudos
Reply