I have a problem similar to this: Apple Push Notification in Production Environment : Unable to get local issuer certificate but in my local computer. I followed this tutorial: http://www.raywenderlich.com/3443/apple-push-notification-services-tutorial-part-12 but in this step
openssl s_client -connect gateway.sandbox.push.apple.com:2195 -cert PushChatCert.pem -key PushChatKey.pem
It says:
(A lot of number and letters) Verify return code: 20 (unable to get local issuer certificate)
What the problem is? Thank you
When ssl certificate problem unable to get local issuer certificate error is caused by a self-signed certificate, the fix is to add the certificate to the trusted certificate store. Open the file ca-bundle. crt located in the directory above, then copy and paste the Git SSL certificate to the end of the file.
The error "Unable to get local issuer certificate" is caused by a misconfiguration of the SSL certificate on your machine. An SSL certificate is code on your web server that provides security for online communications. Thus, the error is occurring because the server cannot create a secure connection with your machine.
For instance, in Google Chrome, click on the lock icon in the address bar, switch to the the Connection tab and click on Certificate Information . Search for the issuer organization name.
To verify a certificate with it's CRL, download the certificate and get its CRL Distribution Point. In the output you should see the CRL url. Next, download the CRL with the wget function. It will be in der format, so we will be converting it to pem format for the openssl verify function to work.
The problem is you are using the "sandbox" APNS server which is used for development.
In order to test the production certificates you have to connect to the production APNS server. You can use the address:
gateway.push.apple.com:2195
instead of gateway.sandbox.push.apple.com:2195
If you love us? You can donate to us via Paypal or buy me a coffee so we can maintain and grow! Thank you!
Donate Us With