解决curl: (60) Peer‘s Certificate issuer is not recognized.错误

一、环境

CentOS 7.9

二、错误信息

2.1. acme更新证书出错

提示

Please refer to https://curl.haxx.se/libcurl/c/libcurl-errors.html for error code: 60

2.2. curl出错

提示

curl: (60) Peer's Certificate issuer is not recognized.
More details here: http://curl.haxx.se/docs/sslcerts.html

三、解决办法

• 安装 ca-certificates 包
  • yum install ca-certificates
• 启用动态 CA 证书
  • update-ca-trust force-enable
• 进入证书目录
  • cd /etc/pki/ca-trust/source/anchors/
• 将证书目录的证书都添加为系统信任证书
  • update-ca-trust extract