AIX Open Source

AIX Open Source

Share your experiences and connect with fellow developers to discover how to build and manage open source software for the AIX operating system

 View Only
Back to discussions
Expand all | Collapse all

YUM error in https : [Errno 14] curl#60 - "SSL certificate problem: self signed certificate in certificate chain"

  • 1.  YUM error in https : [Errno 14] curl#60 - "SSL certificate problem: self signed certificate in certificate chain"

    Posted Mon September 05, 2022 04:56 AM
    Edited by Nicolas KAPLIN Mon September 05, 2022 05:02 AM
    Hello,

    When we try yum list sudo for example, we have an error:

    anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml:">https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml: [Errno 14] curl#60 - "SSL certificate problem: self signed certificate in certificate chain"
    Trying other mirror.
    Error: Cannot retrieve repository metadata (repomd.xml) for repository: AIX_Toolbox. Please verify its path and try again


    We can bypass this error with http (instead of https) or sslverify=false

    So We tried to reinstall CA: 


    yum reinstall ca-certificates -y
    Setting up Reinstall Process
    AIX_Toolbox | 2.7 kB 00:00:00
    AIX_Toolbox/primary_db | 3.1 MB 00:00:00
    AIX_Toolbox_72 | 2.7 kB 00:00:00
    AIX_Toolbox_72/primary_db | 375 kB 00:00:00
    AIX_Toolbox_noarch | 2.6 kB 00:00:00
    AIX_Toolbox_noarch/primary_db | 111 kB 00:00:00
    Resolving Dependencies
    --> Running transaction check
    ---> Package ca-certificates.ppc 0:2021.2.52-3 will be reinstalled
    --> Finished Dependency Resolution

    yum clean all

    but we still have the error...

    When we try ssl connection:
    /usr/bin/openssl s_client -showcerts -connect public.dhe.ibm.com:443

    Key-Arg : None
    PSK identity: None
    PSK identity hint: None
    SRP username: None
    Start Time: 1662362491
    Timeout : 300 (sec)
    Verify return code: 19 (self signed certificate in certificate chain)

    we have a code 19


    We tried to replace the CA-bundle.crt with a one who works and we have a code zero with ssl conection: 

    openssl s_client -connect github.com:443 = OK

    openssl s_client -connect 129.35.224.112/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata.xml:443 = OK



    Key-Arg : None
    PSK identity: None
    PSK identity hint: None
    SRP username: None
    Start Time: 1662366043
    Timeout : 300 (sec)
    Verify return code: 0 (ok)



    We made a yum clean all after that but we still have an error with yum list sudo
    yum -t list sudo
    anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml:">https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml: [Errno 14] curl#60 - "SSL certificate problem: self signed certificate in certificate chain"
    Trying other mirror.
    Error: Cannot retrieve repository metadata (repomd.xml) for repository: AIX_Toolbox. Please verify its path and try again



    Why, do we have an ssl problem, with the CA-bundle.crt , it is generated with ca-certificates from IBM ? 


    Thank you for your help

    regards


    Nicolas




    ------------------------------
    Nicolas KAPLIN
    ------------------------------


  • 2.  RE: YUM error in https : [Errno 14] curl#60 - "SSL certificate problem: self signed certificate in certificate chain"

    Posted Wed September 07, 2022 04:46 AM
    Users had issues with ca-certificates sometime back. We fixed those issues with the ca-certificates version 2021.2.52-3.
    So I am not sure what is the problem here. Please check whether the hashes are created in /var/ssl/certs directory.

    ------------------------------
    Ayappan P
    ------------------------------

    Original Message


  • 3.  RE: YUM error in https : [Errno 14] curl#60 - "SSL certificate problem: self signed certificate in certificate chain"

    Posted Wed September 07, 2022 08:45 AM
    Hello Ayappan,

    We checked the hashes created , seems to be ok:

    Hash file a94d09e5.0 correpond to the following cert
            - /var/ssl/certs/ca-bundle.crt
            - /var/ssl/certs/ACCVRAIZ1.crt
            - /var/ssl/certs/ca-bundle.trust.crt


    ------------------------------
    Nicolas KAPLIN
    ------------------------------

    Original Message


  • 4.  RE: YUM error in https : [Errno 14] curl#60 - "SSL certificate problem: self signed certificate in certificate chain"

    Posted Wed September 07, 2022 09:09 AM
    Can you share the below two outputs ? 

    ls -l /var/ssl
    ls -l /var/ssl/certs

    ------------------------------
    Ayappan P
    ------------------------------

    Original Message


  • 5.  RE: YUM error in https : [Errno 14] curl#60 - "SSL certificate problem: self signed certificate in certificate chain"

    Posted Wed September 07, 2022 09:23 AM
    # ls -l /var/ssl
    total 152
    drwxr-xr-x 2 root system 256 Sep 05 10:04 64
    lrwxrwxrwx 1 root system 33 Sep 05 10:05 cert.pem -> /home/pichard/certs/ca-bundle.crt
    drwxr-xr-x 2 root system 20480 Sep 05 10:04 certs
    drwxr-xr-x 2 root system 28672 Sep 02 10:04 certs.old
    drwxr-xr-x 2 root system 256 Sep 06 10:04 misc
    -rw-r--r-- 1 root system 11485 Jun 16 2021 openssl.cnf
    -rw-r--r-- 1 root system 11485 Oct 05 2015 openssl.cnf.rpmorig


    # ls -l /var/ssl/certs
    total 0
    lrwxrwxrwx 1 root system 23 Sep 05 10:04 002c0b4f.0 -> GlobalSign_Root_R46.crt
    lrwxrwxrwx 1 root system 45 Sep 05 10:04 02265526.0 -> Entrust_Root_Certification_Authority_-_G2.crt
    lrwxrwxrwx 1 root system 36 Sep 05 10:04 03179a64.0 -> Staat_der_Nederlanden_EV_Root_CA.crt
    lrwxrwxrwx 1 root system 27 Sep 05 10:04 062cdee6.0 -> GlobalSign_Root_CA_-_R3.crt
    lrwxrwxrwx 1 root system 25 Sep 05 10:04 064e0aa9.0 -> QuoVadis_Root_CA_2_G3.crt
    lrwxrwxrwx 1 root system 50 Sep 05 10:04 06dc52d5.0 -> SSL.com_EV_Root_Certification_Authority_RSA_R2.crt
    lrwxrwxrwx 1 root system 54 Sep 05 10:04 09789157.0 -> Starfield_Services_Root_Certificate_Authority_-_G2.crt
    lrwxrwxrwx 1 root system 15 Sep 05 10:04 0a775a30.0 -> GTS_Root_R3.crt
    lrwxrwxrwx 1 root system 16 Sep 05 10:04 0b1b94ef.0 -> CFCA_EV_ROOT.crt
    lrwxrwxrwx 1 root system 44 Sep 05 10:04 0bf05006.0 -> SSL.com_Root_Certification_Authority_ECC.crt
    lrwxrwxrwx 1 root system 32 Sep 05 10:04 0f5dc4f3.0 -> UCA_Extended_Validation_Root.crt
    lrwxrwxrwx 1 root system 26 Sep 05 10:04 0f6fa695.0 -> GDCA_TrustAUTH_R5_ROOT.crt
    lrwxrwxrwx 1 root system 15 Sep 05 10:04 1001acf7.0 -> GTS_Root_R1.crt
    lrwxrwxrwx 1 root system 46 Sep 05 10:04 106f3e4d.0 -> Entrust_Root_Certification_Authority_-_EC1.crt
    lrwxrwxrwx 1 root system 27 Sep 05 10:04 14bc7599.0 -> emSign_ECC_Root_CA_-_G3.crt
    lrwxrwxrwx 1 root system 59 Sep 05 10:04 1636090b.0 -> Hellenic_Academic_and_Research_Institutions_RootCA_2011.crt
    lrwxrwxrwx 1 root system 23 Sep 05 10:04 18856ac4.0 -> SecureSign_RootCA11.crt
    lrwxrwxrwx 1 root system 31 Sep 05 10:04 1d3472b9.0 -> GlobalSign_ECC_Root_CA_-_R5.crt
    lrwxrwxrwx 1 root system 37 Sep 05 10:04 1e08bfd1.0 -> IdenTrust_Public_Sector_Root_CA_1.crt
    lrwxrwxrwx 1 root system 32 Sep 05 10:04 1e09d511.0 -> T-TeleSec_GlobalRoot_Class_2.crt
    lrwxrwxrwx 1 root system 38 Sep 05 10:04 244b5494.0 -> DigiCert_High_Assurance_EV_Root_CA.crt
    lrwxrwxrwx 1 root system 23 Sep 05 10:04 2923b3f9.0 -> emSign_Root_CA_-_G1.crt
    lrwxrwxrwx 1 root system 20 Sep 05 10:04 2ae6433e.0 -> CA_Disig_Root_R2.crt
    lrwxrwxrwx 1 root system 26 Sep 05 10:04 2b349938.0 -> AffirmTrust_Commercial.crt
    lrwxrwxrwx 1 root system 18 Sep 05 10:04 2e5ac55d.0 -> DST_Root_CA_X3.crt
    lrwxrwxrwx 1 root system 59 Sep 05 10:04 32888f65.0 -> Hellenic_Academic_and_Research_Institutions_RootCA_2015.crt
    lrwxrwxrwx 1 root system 10 Sep 05 10:04 349f2832.0 -> EC-ACC.crt
    lrwxrwxrwx 1 root system 27 Sep 05 10:04 3513523f.0 -> DigiCert_Global_Root_CA.crt
    lrwxrwxrwx 1 root system 61 Sep 05 10:04 3bde41ac.0 -> Autoridad_de_Certificacion_Firmaprofesional_CIF_A62634068.crt
    lrwxrwxrwx 1 root system 26 Sep 05 10:04 3e44d2f7.0 -> TrustCor_RootCert_CA-2.crt
    lrwxrwxrwx 1 root system 27 Sep 05 10:04 3e45d192.0 -> Hongkong_Post_Root_CA_1.crt
    lrwxrwxrwx 1 root system 45 Sep 05 10:04 3fb36b73.0 -> NAVER_Global_Root_Certification_Authority.crt
    lrwxrwxrwx 1 root system 31 Sep 05 10:04 40193066.0 -> Certum_Trusted_Network_CA_2.crt
    lrwxrwxrwx 1 root system 16 Sep 05 10:04 4042bcee.0 -> ISRG_Root_X1.crt
    lrwxrwxrwx 1 root system 34 Sep 05 10:04 40547a79.0 -> COMODO_Certification_Authority.crt
    lrwxrwxrwx 1 root system 23 Sep 05 10:04 406c9bb1.0 -> emSign_Root_CA_-_C1.crt
    lrwxrwxrwx 1 root system 43 Sep 05 10:04 4304c5e5.0 -> Network_Solutions_Certificate_Authority.crt
    lrwxrwxrwx 1 root system 29 Sep 05 10:04 48bec511.0 -> Certum_Trusted_Network_CA.crt
    lrwxrwxrwx 1 root system 27 Sep 05 10:04 4a6481c9.0 -> GlobalSign_Root_CA_-_R2.crt
    lrwxrwxrwx 1 root system 27 Sep 05 10:04 4b718d9b.0 -> emSign_ECC_Root_CA_-_C3.crt
    lrwxrwxrwx 1 root system 45 Sep 05 10:04 4bfab552.0 -> Starfield_Root_Certificate_Authority_-_G2.crt
    lrwxrwxrwx 1 root system 26 Sep 05 10:04 4f316efb.0 -> SwissSign_Gold_CA_-_G2.crt
    lrwxrwxrwx 1 root system 35 Sep 05 10:04 5273a94c.0 -> E-Tugra_Certification_Authority.crt
    lrwxrwxrwx 1 root system 32 Sep 05 10:04 5443e9e3.0 -> T-TeleSec_GlobalRoot_Class_3.crt
    lrwxrwxrwx 1 root system 27 Sep 05 10:04 54657681.0 -> Buypass_Class_2_Root_CA.crt
    lrwxrwxrwx 1 root system 28 Sep 05 10:04 57bcb2da.0 -> SwissSign_Silver_CA_-_G2.crt
    lrwxrwxrwx 1 root system 22 Sep 05 10:04 5ad8a5d6.0 -> GlobalSign_Root_CA.crt
    lrwxrwxrwx 1 root system 26 Sep 05 10:04 5cd81ad7.0 -> TeliaSonera_Root_CA_v1.crt
    lrwxrwxrwx 1 root system 26 Sep 05 10:04 5d3033c5.0 -> TrustCor_RootCert_CA-1.crt
    lrwxrwxrwx 1 root system 45 Sep 05 10:04 5e98733a.0 -> Entrust_Root_Certification_Authority_-_G4.crt
    lrwxrwxrwx 1 root system 23 Sep 05 10:04 5f15c80c.0 -> TWCA_Global_Root_CA.crt
    lrwxrwxrwx 1 root system 23 Sep 05 10:04 5f618aec.0 -> certSIGN_Root_CA_G2.crt
    lrwxrwxrwx 1 root system 27 Sep 05 10:04 607986c7.0 -> DigiCert_Global_Root_G2.crt
    lrwxrwxrwx 1 root system 15 Sep 05 10:04 626dceaf.0 -> GTS_Root_R2.crt
    lrwxrwxrwx 1 root system 29 Sep 05 10:04 653b494a.0 -> Baltimore_CyberTrust_Root.crt
    lrwxrwxrwx 1 root system 27 Sep 05 10:04 68dd7389.0 -> Hongkong_Post_Root_CA_3.crt
    lrwxrwxrwx 1 root system 40 Sep 05 10:04 6b99d060.0 -> Entrust_Root_Certification_Authority.crt
    lrwxrwxrwx 1 root system 20 Sep 05 10:04 6d41d539.0 -> Amazon_Root_CA_2.crt
    lrwxrwxrwx 1 root system 44 Sep 05 10:04 6fa5da56.0 -> SSL.com_Root_Certification_Authority_RSA.crt
    lrwxrwxrwx 1 root system 24 Sep 05 10:04 706f604c.0 -> XRamp_Global_CA_Root.crt
    lrwxrwxrwx 1 root system 25 Sep 05 10:04 749e9e03.0 -> QuoVadis_Root_CA_1_G3.crt
    lrwxrwxrwx 1 root system 28 Sep 05 10:04 75d1b2ed.0 -> DigiCert_Trusted_Root_G4.crt
    lrwxrwxrwx 1 root system 26 Sep 05 10:04 76cb8f92.0 -> Cybertrust_Global_Root.crt
    lrwxrwxrwx 1 root system 22 Sep 05 10:04 76faf6c0.0 -> QuoVadis_Root_CA_3.crt
    lrwxrwxrwx 1 root system 63 Sep 05 10:04 7719f463.0 -> Hellenic_Academic_and_Research_Institutions_ECC_RootCA_2015.crt
    lrwxrwxrwx 1 root system 35 Sep 05 10:04 773e07ad.0 -> OISTE_WISeKey_Global_Root_GC_CA.crt
    lrwxrwxrwx 1 root system 18 Sep 05 10:04 7aaf71c0.0 -> TrustCor_ECA-1.crt
    lrwxrwxrwx 1 root system 31 Sep 05 10:04 7f3d5d1d.0 -> DigiCert_Assured_ID_Root_G3.crt
    lrwxrwxrwx 1 root system 34 Sep 05 10:04 8160b96c.0 -> Microsec_e-Szigno_Root_CA_2009.crt
    lrwxrwxrwx 1 root system 20 Sep 05 10:04 8cb5ee0f.0 -> Amazon_Root_CA_3.crt
    lrwxrwxrwx 1 root system 20 Sep 05 10:04 8d86cdd1.0 -> certSIGN_ROOT_CA.crt
    lrwxrwxrwx 1 root system 49 Sep 05 10:04 8d89cda1.0 -> Microsoft_ECC_Root_Certificate_Authority_2017.crt
    lrwxrwxrwx 1 root system 34 Sep 05 10:04 930ac5d2.0 -> Actalis_Authentication_Root_CA.crt
    lrwxrwxrwx 1 root system 26 Sep 05 10:04 93bc0acc.0 -> AffirmTrust_Networking.crt
    lrwxrwxrwx 1 root system 20 Sep 05 10:04 9482e63a.0 -> Certum_EC-384_CA.crt
    lrwxrwxrwx 1 root system 44 Sep 05 10:04 988a38cb.0 -> NetLock_Arany_=Class_Gold=_Fotanusitvany.crt
    lrwxrwxrwx 1 root system 53 Sep 05 10:04 9b5697b0.0 -> Trustwave_Global_ECC_P256_Certification_Authority.crt
    lrwxrwxrwx 1 root system 27 Sep 05 10:04 9c8dfbd4.0 -> AffirmTrust_Premium_ECC.crt
    lrwxrwxrwx 1 root system 31 Sep 05 10:04 9d04f354.0 -> DigiCert_Assured_ID_Root_G2.crt
    lrwxrwxrwx 1 root system 31 Sep 05 10:04 9f727ac7.0 -> HARICA_TLS_RSA_Root_CA_2021.crt
    lrwxrwxrwx 1 root system 41 Sep 05 10:04 ACCVRAIZ1.crt -> /opt/freeware/etc/ssl/certs/ACCVRAIZ1.crt
    lrwxrwxrwx 1 root system 48 Sep 05 10:04 AC_RAIZ_FNMT-RCM.crt -> /opt/freeware/etc/ssl/certs/AC_RAIZ_FNMT-RCM.crt
    lrwxrwxrwx 1 root system 67 Sep 05 10:04 AC_RAIZ_FNMT-RCM_SERVIDORES_SEGUROS.crt -> /opt/freeware/etc/ssl/certs/AC_RAIZ_FNMT-RCM_SERVIDORES_SEGUROS.crt
    lrwxrwxrwx 1 root system 57 Sep 05 10:04 ANF_Secure_Server_Root_CA.crt -> /opt/freeware/etc/ssl/certs/ANF_Secure_Server_Root_CA.crt
    lrwxrwxrwx 1 root system 62 Sep 05 10:04 Actalis_Authentication_Root_CA.crt -> /opt/freeware/etc/ssl/certs/Actalis_Authentication_Root_CA.crt
    lrwxrwxrwx 1 root system 54 Sep 05 10:04 AffirmTrust_Commercial.crt -> /opt/freeware/etc/ssl/certs/AffirmTrust_Commercial.crt
    lrwxrwxrwx 1 root system 54 Sep 05 10:04 AffirmTrust_Networking.crt -> /opt/freeware/etc/ssl/certs/AffirmTrust_Networking.crt
    lrwxrwxrwx 1 root system 51 Sep 05 10:04 AffirmTrust_Premium.crt -> /opt/freeware/etc/ssl/certs/AffirmTrust_Premium.crt
    lrwxrwxrwx 1 root system 55 Sep 05 10:04 AffirmTrust_Premium_ECC.crt -> /opt/freeware/etc/ssl/certs/AffirmTrust_Premium_ECC.crt
    lrwxrwxrwx 1 root system 48 Sep 05 10:04 Amazon_Root_CA_1.crt -> /opt/freeware/etc/ssl/certs/Amazon_Root_CA_1.crt
    lrwxrwxrwx 1 root system 48 Sep 05 10:04 Amazon_Root_CA_2.crt -> /opt/freeware/etc/ssl/certs/Amazon_Root_CA_2.crt
    lrwxrwxrwx 1 root system 48 Sep 05 10:04 Amazon_Root_CA_3.crt -> /opt/freeware/etc/ssl/certs/Amazon_Root_CA_3.crt
    lrwxrwxrwx 1 root system 48 Sep 05 10:04 Amazon_Root_CA_4.crt -> /opt/freeware/etc/ssl/certs/Amazon_Root_CA_4.crt
    lrwxrwxrwx 1 root system 53 Sep 05 10:04 Atos_TrustedRoot_2011.crt -> /opt/freeware/etc/ssl/certs/Atos_TrustedRoot_2011.crt
    lrwxrwxrwx 1 root system 89 Sep 05 10:04 Autoridad_de_Certificacion_Firmaprofesional_CIF_A62634068.crt -> /opt/freeware/etc/ssl/certs/Autoridad_de_Certificacion_Firmaprofesional_CIF_A62634068.crt
    lrwxrwxrwx 1 root system 57 Sep 05 10:04 Baltimore_CyberTrust_Root.crt -> /opt/freeware/etc/ssl/certs/Baltimore_CyberTrust_Root.crt
    lrwxrwxrwx 1 root system 55 Sep 05 10:04 Buypass_Class_2_Root_CA.crt -> /opt/freeware/etc/ssl/certs/Buypass_Class_2_Root_CA.crt
    lrwxrwxrwx 1 root system 55 Sep 05 10:04 Buypass_Class_3_Root_CA.crt -> /opt/freeware/etc/ssl/certs/Buypass_Class_3_Root_CA.crt
    lrwxrwxrwx 1 root system 48 Sep 05 10:04 CA_Disig_Root_R2.crt -> /opt/freeware/etc/ssl/certs/CA_Disig_Root_R2.crt
    lrwxrwxrwx 1 root system 44 Sep 05 10:04 CFCA_EV_ROOT.crt -> /opt/freeware/etc/ssl/certs/CFCA_EV_ROOT.crt
    lrwxrwxrwx 1 root system 62 Sep 05 10:04 COMODO_Certification_Authority.crt -> /opt/freeware/etc/ssl/certs/COMODO_Certification_Authority.crt
    lrwxrwxrwx 1 root system 66 Sep 05 10:04 COMODO_ECC_Certification_Authority.crt -> /opt/freeware/etc/ssl/certs/COMODO_ECC_Certification_Authority.crt
    lrwxrwxrwx 1 root system 66 Sep 05 10:04 COMODO_RSA_Certification_Authority.crt -> /opt/freeware/etc/ssl/certs/COMODO_RSA_Certification_Authority.crt
    lrwxrwxrwx 1 root system 40 Sep 05 10:04 Certigna.crt -> /opt/freeware/etc/ssl/certs/Certigna.crt
    lrwxrwxrwx 1 root system 48 Sep 05 10:04 Certigna_Root_CA.crt -> /opt/freeware/etc/ssl/certs/Certigna_Root_CA.crt
    lrwxrwxrwx 1 root system 48 Sep 05 10:04 Certum_EC-384_CA.crt -> /opt/freeware/etc/ssl/certs/Certum_EC-384_CA.crt
    lrwxrwxrwx 1 root system 57 Sep 05 10:04 Certum_Trusted_Network_CA.crt -> /opt/freeware/etc/ssl/certs/Certum_Trusted_Network_CA.crt
    lrwxrwxrwx 1 root system 59 Sep 05 10:04 Certum_Trusted_Network_CA_2.crt -> /opt/freeware/etc/ssl/certs/Certum_Trusted_Network_CA_2.crt
    lrwxrwxrwx 1 root system 54 Sep 05 10:04 Certum_Trusted_Root_CA.crt -> /opt/freeware/etc/ssl/certs/Certum_Trusted_Root_CA.crt
    lrwxrwxrwx 1 root system 56 Sep 05 10:04 Comodo_AAA_Services_root.crt -> /opt/freeware/etc/ssl/certs/Comodo_AAA_Services_root.crt
    lrwxrwxrwx 1 root system 54 Sep 05 10:04 Cybertrust_Global_Root.crt -> /opt/freeware/etc/ssl/certs/Cybertrust_Global_Root.crt
    lrwxrwxrwx 1 root system 62 Sep 05 10:04 D-TRUST_Root_Class_3_CA_2_2009.crt -> /opt/freeware/etc/ssl/certs/D-TRUST_Root_Class_3_CA_2_2009.crt
    lrwxrwxrwx 1 root system 65 Sep 05 10:04 D-TRUST_Root_Class_3_CA_2_EV_2009.crt -> /opt/freeware/etc/ssl/certs/D-TRUST_Root_Class_3_CA_2_EV_2009.crt
    lrwxrwxrwx 1 root system 46 Sep 05 10:04 DST_Root_CA_X3.crt -> /opt/freeware/etc/ssl/certs/DST_Root_CA_X3.crt
    lrwxrwxrwx 1 root system 59 Sep 05 10:04 DigiCert_Assured_ID_Root_CA.crt -> /opt/freeware/etc/ssl/certs/DigiCert_Assured_ID_Root_CA.crt
    lrwxrwxrwx 1 root system 59 Sep 05 10:04 DigiCert_Assured_ID_Root_G2.crt -> /opt/freeware/etc/ssl/certs/DigiCert_Assured_ID_Root_G2.crt
    lrwxrwxrwx 1 root system 59 Sep 05 10:04 DigiCert_Assured_ID_Root_G3.crt -> /opt/freeware/etc/ssl/certs/DigiCert_Assured_ID_Root_G3.crt
    lrwxrwxrwx 1 root system 55 Sep 05 10:04 DigiCert_Global_Root_CA.crt -> /opt/freeware/etc/ssl/certs/DigiCert_Global_Root_CA.crt
    lrwxrwxrwx 1 root system 55 Sep 05 10:04 DigiCert_Global_Root_G2.crt -> /opt/freeware/etc/ssl/certs/DigiCert_Global_Root_G2.crt
    lrwxrwxrwx 1 root system 55 Sep 05 10:04 DigiCert_Global_Root_G3.crt -> /opt/freeware/etc/ssl/certs/DigiCert_Global_Root_G3.crt
    lrwxrwxrwx 1 root system 66 Sep 05 10:04 DigiCert_High_Assurance_EV_Root_CA.crt -> /opt/freeware/etc/ssl/certs/DigiCert_High_Assurance_EV_Root_CA.crt
    lrwxrwxrwx 1 root system 56 Sep 05 10:04 DigiCert_Trusted_Root_G4.crt -> /opt/freeware/etc/ssl/certs/DigiCert_Trusted_Root_G4.crt
    lrwxrwxrwx 1 root system 63 Sep 05 10:04 E-Tugra_Certification_Authority.crt -> /opt/freeware/etc/ssl/certs/E-Tugra_Certification_Authority.crt
    lrwxrwxrwx 1 root system 38 Sep 05 10:04 EC-ACC.crt -> /opt/freeware/etc/ssl/certs/EC-ACC.crt
    lrwxrwxrwx 1 root system 73 Sep 05 10:04 Entrust.net_Premium_2048_Secure_Server_CA.crt -> /opt/freeware/etc/ssl/certs/Entrust.net_Premium_2048_Secure_Server_CA.crt
    lrwxrwxrwx 1 root system 68 Sep 05 10:04 Entrust_Root_Certification_Authority.crt -> /opt/freeware/etc/ssl/certs/Entrust_Root_Certification_Authority.crt
    lrwxrwxrwx 1 root system 74 Sep 05 10:04 Entrust_Root_Certification_Authority_-_EC1.crt -> /opt/freeware/etc/ssl/certs/Entrust_Root_Certification_Authority_-_EC1.crt
    lrwxrwxrwx 1 root system 73 Sep 05 10:04 Entrust_Root_Certification_Authority_-_G2.crt -> /opt/freeware/etc/ssl/certs/Entrust_Root_Certification_Authority_-_G2.crt
    lrwxrwxrwx 1 root system 73 Sep 05 10:04 Entrust_Root_Certification_Authority_-_G4.crt -> /opt/freeware/etc/ssl/certs/Entrust_Root_Certification_Authority_-_G4.crt
    lrwxrwxrwx 1 root system 54 Sep 05 10:04 GDCA_TrustAUTH_R5_ROOT.crt -> /opt/freeware/etc/ssl/certs/GDCA_TrustAUTH_R5_ROOT.crt
    lrwxrwxrwx 1 root system 48 Sep 05 10:04 GLOBALTRUST_2020.crt -> /opt/freeware/etc/ssl/certs/GLOBALTRUST_2020.crt
    lrwxrwxrwx 1 root system 43 Sep 05 10:04 GTS_Root_R1.crt -> /opt/freeware/etc/ssl/certs/GTS_Root_R1.crt
    lrwxrwxrwx 1 root system 43 Sep 05 10:04 GTS_Root_R2.crt -> /opt/freeware/etc/ssl/certs/GTS_Root_R2.crt
    lrwxrwxrwx 1 root system 43 Sep 05 10:04 GTS_Root_R3.crt -> /opt/freeware/etc/ssl/certs/GTS_Root_R3.crt
    lrwxrwxrwx 1 root system 43 Sep 05 10:04 GTS_Root_R4.crt -> /opt/freeware/etc/ssl/certs/GTS_Root_R4.crt
    lrwxrwxrwx 1 root system 59 Sep 05 10:04 GlobalSign_ECC_Root_CA_-_R4.crt -> /opt/freeware/etc/ssl/certs/GlobalSign_ECC_Root_CA_-_R4.crt
    lrwxrwxrwx 1 root system 59 Sep 05 10:04 GlobalSign_ECC_Root_CA_-_R5.crt -> /opt/freeware/etc/ssl/certs/GlobalSign_ECC_Root_CA_-_R5.crt
    lrwxrwxrwx 1 root system 50 Sep 05 10:04 GlobalSign_Root_CA.crt -> /opt/freeware/etc/ssl/certs/GlobalSign_Root_CA.crt
    lrwxrwxrwx 1 root system 55 Sep 05 10:04 GlobalSign_Root_CA_-_R2.crt -> /opt/freeware/etc/ssl/certs/GlobalSign_Root_CA_-_R2.crt
    lrwxrwxrwx 1 root system 55 Sep 05 10:04 GlobalSign_Root_CA_-_R3.crt -> /opt/freeware/etc/ssl/certs/GlobalSign_Root_CA_-_R3.crt
    lrwxrwxrwx 1 root system 55 Sep 05 10:04 GlobalSign_Root_CA_-_R6.crt -> /opt/freeware/etc/ssl/certs/GlobalSign_Root_CA_-_R6.crt
    lrwxrwxrwx 1 root system 51 Sep 05 10:04 GlobalSign_Root_E46.crt -> /opt/freeware/etc/ssl/certs/GlobalSign_Root_E46.crt
    lrwxrwxrwx 1 root system 51 Sep 05 10:04 GlobalSign_Root_R46.crt -> /opt/freeware/etc/ssl/certs/GlobalSign_Root_R46.crt
    lrwxrwxrwx 1 root system 51 Sep 05 10:04 Go_Daddy_Class_2_CA.crt -> /opt/freeware/etc/ssl/certs/Go_Daddy_Class_2_CA.crt
    lrwxrwxrwx 1 root system 72 Sep 05 10:04 Go_Daddy_Root_Certificate_Authority_-_G2.crt -> /opt/freeware/etc/ssl/certs/Go_Daddy_Root_Certificate_Authority_-_G2.crt
    lrwxrwxrwx 1 root system 59 Sep 05 10:04 HARICA_TLS_ECC_Root_CA_2021.crt -> /opt/freeware/etc/ssl/certs/HARICA_TLS_ECC_Root_CA_2021.crt
    lrwxrwxrwx 1 root system 59 Sep 05 10:04 HARICA_TLS_RSA_Root_CA_2021.crt -> /opt/freeware/etc/ssl/certs/HARICA_TLS_RSA_Root_CA_2021.crt
    lrwxrwxrwx 1 root system 91 Sep 05 10:04 Hellenic_Academic_and_Research_Institutions_ECC_RootCA_2015.crt -> /opt/freeware/etc/ssl/certs/Hellenic_Academic_and_Research_Institutions_ECC_RootCA_2015.crt
    lrwxrwxrwx 1 root system 87 Sep 05 10:04 Hellenic_Academic_and_Research_Institutions_RootCA_2011.crt -> /opt/freeware/etc/ssl/certs/Hellenic_Academic_and_Research_Institutions_RootCA_2011.crt
    lrwxrwxrwx 1 root system 87 Sep 05 10:04 Hellenic_Academic_and_Research_Institutions_RootCA_2015.crt -> /opt/freeware/etc/ssl/certs/Hellenic_Academic_and_Research_Institutions_RootCA_2015.crt
    lrwxrwxrwx 1 root system 55 Sep 05 10:04 Hongkong_Post_Root_CA_1.crt -> /opt/freeware/etc/ssl/certs/Hongkong_Post_Root_CA_1.crt
    lrwxrwxrwx 1 root system 55 Sep 05 10:04 Hongkong_Post_Root_CA_3.crt -> /opt/freeware/etc/ssl/certs/Hongkong_Post_Root_CA_3.crt
    lrwxrwxrwx 1 root system 44 Sep 05 10:04 ISRG_Root_X1.crt -> /opt/freeware/etc/ssl/certs/ISRG_Root_X1.crt
    lrwxrwxrwx 1 root system 62 Sep 05 10:04 IdenTrust_Commercial_Root_CA_1.crt -> /opt/freeware/etc/ssl/certs/IdenTrust_Commercial_Root_CA_1.crt
    lrwxrwxrwx 1 root system 65 Sep 05 10:04 IdenTrust_Public_Sector_Root_CA_1.crt -> /opt/freeware/etc/ssl/certs/IdenTrust_Public_Sector_Root_CA_1.crt
    lrwxrwxrwx 1 root system 42 Sep 05 10:04 Izenpe.com.crt -> /opt/freeware/etc/ssl/certs/Izenpe.com.crt
    lrwxrwxrwx 1 root system 62 Sep 05 10:04 Microsec_e-Szigno_Root_CA_2009.crt -> /opt/freeware/etc/ssl/certs/Microsec_e-Szigno_Root_CA_2009.crt
    lrwxrwxrwx 1 root system 77 Sep 05 10:04 Microsoft_ECC_Root_Certificate_Authority_2017.crt -> /opt/freeware/etc/ssl/certs/Microsoft_ECC_Root_Certificate_Authority_2017.crt
    lrwxrwxrwx 1 root system 77 Sep 05 10:04 Microsoft_RSA_Root_Certificate_Authority_2017.crt -> /opt/freeware/etc/ssl/certs/Microsoft_RSA_Root_Certificate_Authority_2017.crt
    lrwxrwxrwx 1 root system 73 Sep 05 10:04 NAVER_Global_Root_Certification_Authority.crt -> /opt/freeware/etc/ssl/certs/NAVER_Global_Root_Certification_Authority.crt
    lrwxrwxrwx 1 root system 72 Sep 05 10:04 NetLock_Arany_=Class_Gold=_Fotanusitvany.crt -> /opt/freeware/etc/ssl/certs/NetLock_Arany_=Class_Gold=_Fotanusitvany.crt
    lrwxrwxrwx 1 root system 71 Sep 05 10:04 Network_Solutions_Certificate_Authority.crt -> /opt/freeware/etc/ssl/certs/Network_Solutions_Certificate_Authority.crt
    lrwxrwxrwx 1 root system 63 Sep 05 10:04 OISTE_WISeKey_Global_Root_GB_CA.crt -> /opt/freeware/etc/ssl/certs/OISTE_WISeKey_Global_Root_GB_CA.crt
    lrwxrwxrwx 1 root system 63 Sep 05 10:04 OISTE_WISeKey_Global_Root_GC_CA.crt -> /opt/freeware/etc/ssl/certs/OISTE_WISeKey_Global_Root_GC_CA.crt
    lrwxrwxrwx 1 root system 53 Sep 05 10:04 QuoVadis_Root_CA_1_G3.crt -> /opt/freeware/etc/ssl/certs/QuoVadis_Root_CA_1_G3.crt
    lrwxrwxrwx 1 root system 50 Sep 05 10:04 QuoVadis_Root_CA_2.crt -> /opt/freeware/etc/ssl/certs/QuoVadis_Root_CA_2.crt
    lrwxrwxrwx 1 root system 53 Sep 05 10:04 QuoVadis_Root_CA_2_G3.crt -> /opt/freeware/etc/ssl/certs/QuoVadis_Root_CA_2_G3.crt
    lrwxrwxrwx 1 root system 50 Sep 05 10:04 QuoVadis_Root_CA_3.crt -> /opt/freeware/etc/ssl/certs/QuoVadis_Root_CA_3.crt
    lrwxrwxrwx 1 root system 53 Sep 05 10:04 QuoVadis_Root_CA_3_G3.crt -> /opt/freeware/etc/ssl/certs/QuoVadis_Root_CA_3_G3.crt
    lrwxrwxrwx 1 root system 75 Sep 05 10:04 SSL.com_EV_Root_Certification_Authority_ECC.crt -> /opt/freeware/etc/ssl/certs/SSL.com_EV_Root_Certification_Authority_ECC.crt
    lrwxrwxrwx 1 root system 78 Sep 05 10:04 SSL.com_EV_Root_Certification_Authority_RSA_R2.crt -> /opt/freeware/etc/ssl/certs/SSL.com_EV_Root_Certification_Authority_RSA_R2.crt
    lrwxrwxrwx 1 root system 72 Sep 05 10:04 SSL.com_Root_Certification_Authority_ECC.crt -> /opt/freeware/etc/ssl/certs/SSL.com_Root_Certification_Authority_ECC.crt
    lrwxrwxrwx 1 root system 72 Sep 05 10:04 SSL.com_Root_Certification_Authority_RSA.crt -> /opt/freeware/etc/ssl/certs/SSL.com_Root_Certification_Authority_RSA.crt
    lrwxrwxrwx 1 root system 47 Sep 05 10:04 SZAFIR_ROOT_CA2.crt -> /opt/freeware/etc/ssl/certs/SZAFIR_ROOT_CA2.crt
    lrwxrwxrwx 1 root system 51 Sep 05 10:04 SecureSign_RootCA11.crt -> /opt/freeware/etc/ssl/certs/SecureSign_RootCA11.crt
    lrwxrwxrwx 1 root system 46 Sep 05 10:04 SecureTrust_CA.crt -> /opt/freeware/etc/ssl/certs/SecureTrust_CA.crt
    lrwxrwxrwx 1 root system 48 Sep 05 10:04 Secure_Global_CA.crt -> /opt/freeware/etc/ssl/certs/Secure_Global_CA.crt
    lrwxrwxrwx 1 root system 62 Sep 05 10:04 Security_Communication_RootCA2.crt -> /opt/freeware/etc/ssl/certs/Security_Communication_RootCA2.crt
    lrwxrwxrwx 1 root system 62 Sep 05 10:04 Security_Communication_Root_CA.crt -> /opt/freeware/etc/ssl/certs/Security_Communication_Root_CA.crt
    lrwxrwxrwx 1 root system 64 Sep 05 10:04 Staat_der_Nederlanden_EV_Root_CA.crt -> /opt/freeware/etc/ssl/certs/Staat_der_Nederlanden_EV_Root_CA.crt
    lrwxrwxrwx 1 root system 52 Sep 05 10:04 Starfield_Class_2_CA.crt -> /opt/freeware/etc/ssl/certs/Starfield_Class_2_CA.crt
    lrwxrwxrwx 1 root system 73 Sep 05 10:04 Starfield_Root_Certificate_Authority_-_G2.crt -> /opt/freeware/etc/ssl/certs/Starfield_Root_Certificate_Authority_-_G2.crt
    lrwxrwxrwx 1 root system 82 Sep 05 10:04 Starfield_Services_Root_Certificate_Authority_-_G2.crt -> /opt/freeware/etc/ssl/certs/Starfield_Services_Root_Certificate_Authority_-_G2.crt
    lrwxrwxrwx 1 root system 54 Sep 05 10:04 SwissSign_Gold_CA_-_G2.crt -> /opt/freeware/etc/ssl/certs/SwissSign_Gold_CA_-_G2.crt
    lrwxrwxrwx 1 root system 56 Sep 05 10:04 SwissSign_Silver_CA_-_G2.crt -> /opt/freeware/etc/ssl/certs/SwissSign_Silver_CA_-_G2.crt
    lrwxrwxrwx 1 root system 60 Sep 05 10:04 T-TeleSec_GlobalRoot_Class_2.crt -> /opt/freeware/etc/ssl/certs/T-TeleSec_GlobalRoot_Class_2.crt
    lrwxrwxrwx 1 root system 60 Sep 05 10:04 T-TeleSec_GlobalRoot_Class_3.crt -> /opt/freeware/etc/ssl/certs/T-TeleSec_GlobalRoot_Class_3.crt
    lrwxrwxrwx 1 root system 77 Sep 05 10:04 TUBITAK_Kamu_SM_SSL_Kok_Sertifikasi_-_Surum_1.crt -> /opt/freeware/etc/ssl/certs/TUBITAK_Kamu_SM_SSL_Kok_Sertifikasi_-_Surum_1.crt
    lrwxrwxrwx 1 root system 51 Sep 05 10:04 TWCA_Global_Root_CA.crt -> /opt/freeware/etc/ssl/certs/TWCA_Global_Root_CA.crt
    lrwxrwxrwx 1 root system 65 Sep 05 10:04 TWCA_Root_Certification_Authority.crt -> /opt/freeware/etc/ssl/certs/TWCA_Root_Certification_Authority.crt
    lrwxrwxrwx 1 root system 54 Sep 05 10:04 TeliaSonera_Root_CA_v1.crt -> /opt/freeware/etc/ssl/certs/TeliaSonera_Root_CA_v1.crt
    lrwxrwxrwx 1 root system 46 Sep 05 10:04 TrustCor_ECA-1.crt -> /opt/freeware/etc/ssl/certs/TrustCor_ECA-1.crt
    lrwxrwxrwx 1 root system 54 Sep 05 10:04 TrustCor_RootCert_CA-1.crt -> /opt/freeware/etc/ssl/certs/TrustCor_RootCert_CA-1.crt
    lrwxrwxrwx 1 root system 54 Sep 05 10:04 TrustCor_RootCert_CA-2.crt -> /opt/freeware/etc/ssl/certs/TrustCor_RootCert_CA-2.crt
    lrwxrwxrwx 1 root system 72 Sep 05 10:04 Trustwave_Global_Certification_Authority.crt -> /opt/freeware/etc/ssl/certs/Trustwave_Global_Certification_Authority.crt
    lrwxrwxrwx 1 root system 81 Sep 05 10:04 Trustwave_Global_ECC_P256_Certification_Authority.crt -> /opt/freeware/etc/ssl/certs/Trustwave_Global_ECC_P256_Certification_Authority.crt
    lrwxrwxrwx 1 root system 81 Sep 05 10:04 Trustwave_Global_ECC_P384_Certification_Authority.crt -> /opt/freeware/etc/ssl/certs/Trustwave_Global_ECC_P384_Certification_Authority.crt
    lrwxrwxrwx 1 root system 48 Sep 05 10:04 TunTrust_Root_CA.crt -> /opt/freeware/etc/ssl/certs/TunTrust_Root_CA.crt
    lrwxrwxrwx 1 root system 60 Sep 05 10:04 UCA_Extended_Validation_Root.crt -> /opt/freeware/etc/ssl/certs/UCA_Extended_Validation_Root.crt
    lrwxrwxrwx 1 root system 50 Sep 05 10:04 UCA_Global_G2_Root.crt -> /opt/freeware/etc/ssl/certs/UCA_Global_G2_Root.crt
    lrwxrwxrwx 1 root system 69 Sep 05 10:04 USERTrust_ECC_Certification_Authority.crt -> /opt/freeware/etc/ssl/certs/USERTrust_ECC_Certification_Authority.crt
    lrwxrwxrwx 1 root system 69 Sep 05 10:04 USERTrust_RSA_Certification_Authority.crt -> /opt/freeware/etc/ssl/certs/USERTrust_RSA_Certification_Authority.crt
    lrwxrwxrwx 1 root system 52 Sep 05 10:04 XRamp_Global_CA_Root.crt -> /opt/freeware/etc/ssl/certs/XRamp_Global_CA_Root.crt
    lrwxrwxrwx 1 root system 15 Sep 05 10:04 a3418fda.0 -> GTS_Root_R4.crt
    lrwxrwxrwx 1 root system 13 Sep 05 10:04 a94d09e5.0 -> ACCVRAIZ1.crt
    lrwxrwxrwx 1 root system 45 Sep 05 10:04 aee5f10d.0 -> Entrust.net_Premium_2048_Secure_Server_CA.crt
    lrwxrwxrwx 1 root system 31 Sep 05 10:04 b0e59380.0 -> GlobalSign_ECC_Root_CA_-_R4.crt
    lrwxrwxrwx 1 root system 31 Sep 05 10:04 b1159c4c.0 -> DigiCert_Assured_ID_Root_CA.crt
    lrwxrwxrwx 1 root system 29 Sep 05 10:04 b433981b.0 -> ANF_Secure_Server_Root_CA.crt
    lrwxrwxrwx 1 root system 20 Sep 05 10:04 b66938e9.0 -> Secure_Global_CA.crt
    lrwxrwxrwx 1 root system 23 Sep 05 10:04 b727005e.0 -> AffirmTrust_Premium.crt
    lrwxrwxrwx 1 root system 37 Sep 05 10:04 b7a5b843.0 -> TWCA_Root_Certification_Authority.crt
    lrwxrwxrwx 1 root system 39 Sep 05 10:04 b81b93f0.0 -> AC_RAIZ_FNMT-RCM_SERVIDORES_SEGUROS.crt
    lrwxrwxrwx 1 root system 49 Sep 05 10:04 bf53fb88.0 -> Microsoft_RSA_Root_Certificate_Authority_2017.crt
    lrwxrwxrwx 1 root system 22 Sep 05 10:04 c01eb047.0 -> UCA_Global_G2_Root.crt
    lrwxrwxrwx 1 root system 34 Sep 05 10:04 c28a8a30.0 -> D-TRUST_Root_Class_3_CA_2_2009.crt
    lrwxrwxrwx 1 root system 41 Sep 05 10:04 ca-bundle.crt -> /opt/freeware/etc/ssl/certs/ca-bundle.crt
    lrwxrwxrwx 1 root system 47 Sep 05 10:04 ca-bundle.trust.crt -> /opt/freeware/etc/ssl/certs/ca-bundle.trust.crt
    lrwxrwxrwx 1 root system 37 Sep 05 10:04 ca6e4ad9.0 -> ePKI_Root_Certification_Authority.crt
    lrwxrwxrwx 1 root system 44 Sep 05 10:04 cbf06781.0 -> Go_Daddy_Root_Certificate_Authority_-_G2.crt
    lrwxrwxrwx 1 root system 14 Sep 05 10:04 cc450945.0 -> Izenpe.com.crt
    lrwxrwxrwx 1 root system 34 Sep 05 10:04 cd58d51e.0 -> Security_Communication_RootCA2.crt
    lrwxrwxrwx 1 root system 20 Sep 05 10:04 cd8c0d63.0 -> AC_RAIZ_FNMT-RCM.crt
    lrwxrwxrwx 1 root system 20 Sep 05 10:04 ce5e74ef.0 -> Amazon_Root_CA_1.crt
    lrwxrwxrwx 1 root system 48 Sep 05 10:04 certSIGN_ROOT_CA.crt -> /opt/freeware/etc/ssl/certs/certSIGN_ROOT_CA.crt
    lrwxrwxrwx 1 root system 51 Sep 05 10:04 certSIGN_Root_CA_G2.crt -> /opt/freeware/etc/ssl/certs/certSIGN_Root_CA_G2.crt
    lrwxrwxrwx 1 root system 37 Sep 05 10:04 d4dae3dd.0 -> D-TRUST_Root_Class_3_CA_2_EV_2009.crt
    lrwxrwxrwx 1 root system 38 Sep 05 10:04 d6325660.0 -> COMODO_RSA_Certification_Authority.crt
    lrwxrwxrwx 1 root system 22 Sep 05 10:04 d7e8dc79.0 -> QuoVadis_Root_CA_2.crt
    lrwxrwxrwx 1 root system 53 Sep 05 10:04 d887a5bb.0 -> Trustwave_Global_ECC_P384_Certification_Authority.crt
    lrwxrwxrwx 1 root system 27 Sep 05 10:04 dc4d6a89.0 -> GlobalSign_Root_CA_-_R6.crt
    lrwxrwxrwx 1 root system 27 Sep 05 10:04 dd8e9d41.0 -> DigiCert_Global_Root_G3.crt
    lrwxrwxrwx 1 root system 20 Sep 05 10:04 de6d66f3.0 -> Amazon_Root_CA_4.crt
    lrwxrwxrwx 1 root system 53 Sep 05 10:04 e-Szigno_Root_CA_2017.crt -> /opt/freeware/etc/ssl/certs/e-Szigno_Root_CA_2017.crt
    lrwxrwxrwx 1 root system 12 Sep 05 10:04 e113c810.0 -> Certigna.crt
    lrwxrwxrwx 1 root system 25 Sep 05 10:04 e18bfb83.0 -> QuoVadis_Root_CA_3_G3.crt
    lrwxrwxrwx 1 root system 26 Sep 05 10:04 e35234b1.0 -> Certum_Trusted_Root_CA.crt
    lrwxrwxrwx 1 root system 25 Sep 05 10:04 e36a6752.0 -> Atos_TrustedRoot_2011.crt
    lrwxrwxrwx 1 root system 35 Sep 05 10:04 e73d606e.0 -> OISTE_WISeKey_Global_Root_GB_CA.crt
    lrwxrwxrwx 1 root system 25 Sep 05 10:04 e868b802.0 -> e-Szigno_Root_CA_2017.crt
    lrwxrwxrwx 1 root system 27 Sep 05 10:04 e8de2f56.0 -> Buypass_Class_3_Root_CA.crt
    lrwxrwxrwx 1 root system 65 Sep 05 10:04 ePKI_Root_Certification_Authority.crt -> /opt/freeware/etc/ssl/certs/ePKI_Root_Certification_Authority.crt
    lrwxrwxrwx 1 root system 31 Sep 05 10:04 ecccd8db.0 -> HARICA_TLS_ECC_Root_CA_2021.crt
    lrwxrwxrwx 1 root system 28 Sep 05 10:04 ee64a828.0 -> Comodo_AAA_Services_root.crt
    lrwxrwxrwx 1 root system 38 Sep 05 10:04 eed8c118.0 -> COMODO_ECC_Certification_Authority.crt
    lrwxrwxrwx 1 root system 34 Sep 05 10:04 ef954a4e.0 -> IdenTrust_Commercial_Root_CA_1.crt
    lrwxrwxrwx 1 root system 55 Sep 05 10:04 emSign_ECC_Root_CA_-_C3.crt -> /opt/freeware/etc/ssl/certs/emSign_ECC_Root_CA_-_C3.crt
    lrwxrwxrwx 1 root system 55 Sep 05 10:04 emSign_ECC_Root_CA_-_G3.crt -> /opt/freeware/etc/ssl/certs/emSign_ECC_Root_CA_-_G3.crt
    lrwxrwxrwx 1 root system 51 Sep 05 10:04 emSign_Root_CA_-_C1.crt -> /opt/freeware/etc/ssl/certs/emSign_Root_CA_-_C1.crt
    lrwxrwxrwx 1 root system 51 Sep 05 10:04 emSign_Root_CA_-_G1.crt -> /opt/freeware/etc/ssl/certs/emSign_Root_CA_-_G1.crt
    lrwxrwxrwx 1 root system 23 Sep 05 10:04 f081611a.0 -> Go_Daddy_Class_2_CA.crt
    lrwxrwxrwx 1 root system 47 Sep 05 10:04 f0c70a8d.0 -> SSL.com_EV_Root_Certification_Authority_ECC.crt
    lrwxrwxrwx 1 root system 44 Sep 05 10:04 f249de83.0 -> Trustwave_Global_Certification_Authority.crt
    lrwxrwxrwx 1 root system 41 Sep 05 10:04 f30dd6ad.0 -> USERTrust_ECC_Certification_Authority.crt
    lrwxrwxrwx 1 root system 34 Sep 05 10:04 f3377b1b.0 -> Security_Communication_Root_CA.crt
    lrwxrwxrwx 1 root system 24 Sep 05 10:04 f387163d.0 -> Starfield_Class_2_CA.crt
    lrwxrwxrwx 1 root system 18 Sep 05 10:04 f39fc864.0 -> SecureTrust_CA.crt
    lrwxrwxrwx 1 root system 20 Sep 05 10:04 f51bb24c.0 -> Certigna_Root_CA.crt
    lrwxrwxrwx 1 root system 20 Sep 05 10:04 fa5da96b.0 -> GLOBALTRUST_2020.crt
    lrwxrwxrwx 1 root system 41 Sep 05 10:04 fc5a8f99.0 -> USERTrust_RSA_Certification_Authority.crt
    lrwxrwxrwx 1 root system 20 Sep 05 10:04 fd64f3fc.0 -> TunTrust_Root_CA.crt
    lrwxrwxrwx 1 root system 19 Sep 05 10:04 fe8a2cd8.0 -> SZAFIR_ROOT_CA2.crt
    lrwxrwxrwx 1 root system 23 Sep 05 10:04 feffd413.0 -> GlobalSign_Root_E46.crt
    lrwxrwxrwx 1 root system 49 Sep 05 10:04 ff34af3f.0 -> TUBITAK_Kamu_SM_SSL_Kok_Sertifikasi_-_Surum_1.crt

    ------------------------------
    Nicolas KAPLIN
    ------------------------------

    Original Message


  • 6.  RE: YUM error in https : [Errno 14] curl#60 - "SSL certificate problem: self signed certificate in certificate chain"

    Posted Wed September 07, 2022 10:12 AM
    /var/ssl/certs looks fine.
    Can you share below outputs? 
    lslpp -l | grep openssl
    rpm -qa

    ------------------------------
    Ayappan P
    ------------------------------

    Original Message


  • 7.  RE: YUM error in https : [Errno 14] curl#60 - "SSL certificate problem: self signed certificate in certificate chain"

    Posted Wed September 07, 2022 10:18 AM
    Ayappan,
    # oslevel -s
    7200-05-04-2220

    # lslpp -l | grep openssl
    openssl.base 1.0.2.2103 COMMITTED Open Secure Socket Layer
    openssl.license 1.0.2.2103 COMMITTED Open Secure Socket License
    openssl.man.en_US 1.0.2.2103 COMMITTED Open Secure Socket Layer
    openssl.base 1.0.2.2103 COMMITTED Open Secure Socket Layer



    # rpm -qa
    libdatrie-0.2.4-1.ppc
    libpng-1.6.9-1.ppc
    perl-Net_SSLeay.pm-1.55-3.ppc
    jasper-1.900.1-2.ppc
    librsvg2-2.34.2-1.ppc
    bash_64-5.0-4.ppc
    python-urlgrabber-3.10.1-1.noarch
    shared-mime-info-1.6-2.ppc
    deltarpm-3.6-1.ppc
    bzip2-1.0.8-2.ppc
    gdbm-1.23-1.ppc
    perl-5.34.1-1.ppc
    libgcc8-8.3.0-6.ppc
    zlib-1.2.12-1.ppc
    xz-libs-5.2.5-1.ppc
    libstdc++8-8.3.0-6.ppc
    ncurses-6.3-1.ppc
    fontconfig-2.11.95-4.ppc
    libtasn1-4.16.0-1.ppc
    libjpeg-9d-1.ppc
    pixman-0.34.0-1.ppc
    libgomp-8-1.ppc
    info-6.7-1.ppc
    libtextstyle-0.21-1.ppc
    gettext-0.21-1.ppc
    readline-8.1-1.ppc
    python-2.7.18-3.ppc
    python3-3.7.12-1.ppc
    atk-2.20.0-3.ppc
    pkg-config-0.29.2-2.ppc
    p11-kit-0.23.22-1.ppc
    libXft-2.3.2-4waixX11.ppc
    libssh2-1.10.0-1.ppc
    cyrus-sasl-2.1.28-1.ppc
    apr-util-1.6.1-1.ppc
    lzo-2.10-2.ppc
    pango-1.40.1-2waixX11.ppc
    libtiff-4.3.0-1.ppc
    libnghttp2-1.46.0-1.ppc
    createrepo_c-libs-0.16.0-32_1.ppc
    libxcb-1.14-1waixX11.ppc
    python-pycurl-7.43.0-1.ppc
    mod_ssl-2.4.54-1.ppc
    rsync-3.2.3-1.ppc
    python-tools-2.7.18-3.ppc
    libxml2-python-2.9.14-1.ppc
    jbigkit-2.1-1.ppc
    dejavu-lgc-sans-mono-fonts-2.37-1.noarch
    libdbi-0.9.0-1.ppc
    libart_lgpl-2.3.21-2.ppc
    ca-certificates-2021.2.52-3.ppc
    libthai-0.1.18-1.ppc
    perl-Crypt-SSLeay-0.57-2.ppc
    libcroco-0.6.5-1.ppc
    python-iniparse-0.4-1.noarch
    yum-metadata-parser-1.1.4-2.ppc
    yum-utils-1.1.31-2.noarch
    python-deltarpm-3.6-1.ppc
    test-dummy-1.1-5.ppc
    lpar2rrd-agent-7.40-2.ppc
    db-5.3.28-1.ppc
    libgcc-8-1.ppc
    libffi-3.4.2-1.ppc
    expat-2.4.6-1.ppc
    libstdc++-8-1.ppc
    freetype2-2.12.1-1.ppc
    libXrender-0.9.8-3waixX11.ppc
    apr-1.7.0-1.ppc
    libgomp8-8.3.0-6.ppc
    jbigkit-libs-2.1-1.ppc
    libunistring-0.9.10-1.ppc
    libxml2-2.9.14-1.ppc
    libiconv-1.17-1.ppc
    glib2-2.56.1-3.ppc
    sqlite-3.37.2-1.ppc
    pysqlite-2.8.3-2.ppc
    pcre-8.44-2.ppc
    xcb-proto-1.14-1.ppc
    p11-kit-tools-0.23.22-1.ppc
    krb5-libs-1.18.5-1.ppc
    file-libs-5.41-1.ppc
    lz4-1.9.3-1.ppc
    openldap-2.4.58-3.ppc
    httpd-2.4.54-1.ppc
    cairo-1.14.6-2waixX11.ppc
    libwebp-1.0.2-1.ppc
    gdk-pixbuf-2.35.1-3waixX11.ppc
    curl-7.83.1-1.ppc
    libXdmcp-1.1.2-1.ppc
    createrepo_c-0.16.0-32_1.ppc
    gtk2-2.24.30-3waixX11.ppc
    sudo-1.9.5p2-1.ppc
    yum-3.4.3-8.noarch
    python-devel-2.7.18-3.ppc
    xz-5.2.5-1.ppc
    dejavu-sans-mono-fonts-2.37-1.noarch
    lua-5.4.1-1.ppc
    zip-3.0-4.ppc
    wget-1.21.2-1.ppc
    harfbuzz-4.3.0-1.ppc
    AIX-rpm-7.2.5.103-50.ppc

    ------------------------------
    Nicolas KAPLIN
    ------------------------------

    Original Message


  • 8.  RE: YUM error in https : [Errno 14] curl#60 - "SSL certificate problem: self signed certificate in certificate chain"

    Posted Wed September 07, 2022 11:02 AM
    Do you have any SSL environmental variables ( like SSL_CERT_DIR ., etc) exported ?

    ------------------------------
    Ayappan P
    ------------------------------

    Original Message


  • 9.  RE: YUM error in https : [Errno 14] curl#60 - "SSL certificate problem: self signed certificate in certificate chain"

    Posted Thu September 08, 2022 05:11 AM
    Hello Ayappan,

    No SSL env variables:


    AIXTHREAD_COND_DEBUG='OFF '
    AIXTHREAD_GUARDPAGES=4
    AIXTHREAD_MUTEX_DEBUG='OFF '
    AIXTHREAD_RWLOCK_DEBUG='0FF '
    AIXTHREAD_SCOPE='S '
    EDITOR=vi
    ENV_run=env
    ERRNO=0
    EXTSHM=ON
    FCEDIT=vi
    HISTSIZE=500
    IFS='
    '
    LANG=en_US
    LC__FASTMSG=true
    LINENO=1
    LOCPATH=/usr/lib/nls/loc
    LOGIN=root
    LOGNAME=root
    MAILCHECK=600
    MAILMSG='[YOU HAVE NEW MAIL]'
    MALLOCMULTIHEAP=heaps:16
    ODMDIR=/etc/objrepos
    OPTIND=1
    PAGER=pg
    PATH=/usr/bin:/etc:/usr/sbin:/usr/ucb:/home/kaplin/bin:/usr/bin/X11:/sbin:.:
    PPID=6422846
    PS1='root@XXXX:$PWD # '
    PS2='> '
    PS3='#? '
    PS4='+ '
    RANDOM=530
    SECONDS=32
    SPINLOOPTIME=20000
    SSH_TTY=/dev/pts/2
    TERM=xterm
    TMOUT=0
    TZ=Europe/Paris
    USER=root
    VISUAL=vi
    YIELDLOOPTIME=40000
    _=/bin/ksh

    ------------------------------
    Nicolas KAPLIN
    ------------------------------

    Original Message


  • 10.  RE: YUM error in https : [Errno 14] curl#60 - "SSL certificate problem: self signed certificate in certificate chain"

    Posted Thu September 08, 2022 08:31 AM
    Okay. Everything looks fine except that the cert.pem inside /var/ssl/ is pointing to a custom ca-bundle.crt rather than /opt/freeware/etc/ssl/certs/ca-bundle.crt. Is there any reason for that change?

    ------------------------------
    Ayappan P
    ------------------------------

    Original Message


  • 11.  RE: YUM error in https : [Errno 14] curl#60 - "SSL certificate problem: self signed certificate in certificate chain"

    Posted Thu September 08, 2022 08:49 AM
    Yes, it was a test, we tried to change the ca_bundle, to see  SSL working   (code zero).

    if we put original ca_bundle we have a code 19.

    In both cases, we cant reach IBM server in https , even with SSl code zero (with our CA_bundle modified).

    ------------------------------
    Nicolas KAPLIN
    ------------------------------

    Original Message