Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

Verify return code: 20 (unable to get local issuer certificate)

I have a problem similar to this: Apple Push Notification in Production Environment : Unable to get local issuer certificate but in my local computer. I followed this tutorial: http://www.raywenderlich.com/3443/apple-push-notification-services-tutorial-part-12 but in this step

openssl s_client -connect gateway.sandbox.push.apple.com:2195 -cert PushChatCert.pem -key PushChatKey.pem

It says:

(A lot of number and letters) Verify return code: 20 (unable to get local issuer certificate)

What the problem is? Thank you

like image 833
Sexto Avatar asked Jul 19 '12 09:07

Sexto


People also ask

How do I fix unable to get local issuer certificate?

When ssl certificate problem unable to get local issuer certificate error is caused by a self-signed certificate, the fix is to add the certificate to the trusted certificate store. Open the file ca-bundle. crt located in the directory above, then copy and paste the Git SSL certificate to the end of the file.

What does it mean unable to get local issuer certificate?

The error "Unable to get local issuer certificate" is caused by a misconfiguration of the SSL certificate on your machine. An SSL certificate is code on your web server that provides security for online communications. Thus, the error is occurring because the server cannot create a secure connection with your machine.

How do I find my cert issuer?

For instance, in Google Chrome, click on the lock icon in the address bar, switch to the the Connection tab and click on Certificate Information . Search for the issuer organization name.

How do I verify OpenSSL certificate?

To verify a certificate with it's CRL, download the certificate and get its CRL Distribution Point. In the output you should see the CRL url. Next, download the CRL with the wget function. It will be in der format, so we will be converting it to pem format for the openssl verify function to work.


1 Answers

The problem is you are using the "sandbox" APNS server which is used for development.

In order to test the production certificates you have to connect to the production APNS server. You can use the address:

gateway.push.apple.com:2195 instead of gateway.sandbox.push.apple.com:2195

like image 105
GabCas Avatar answered Oct 21 '22 04:10

GabCas