This documentation contains work-in-progress information for future Elastic Stack and Cloud releases. Use the version selector to view supported release docs. It also contains some Elastic Cloud serverless information. Check out our serverless docs for more details.
« Users are frequently locked out of Active Directory SSLHandshakeException causes connections to fail »
Elastic Docs ›Elasticsearch Guide [master] ›Secure the Elastic Stack ›Troubleshooting security

Certificate verification fails for curl on Mac

edit

Certificate verification fails for curl on Mac

edit

Symptoms:

  • curl on the Mac returns a certificate verification error even when the --cacert option is used.

Resolution:

Apple’s integration of curl with their keychain technology disables the --cacert option. See http://curl.haxx.se/mail/archive-2013-10/0036.html for more information.

You can use another tool, such as wget, to test certificates. Alternately, you can add the certificate for the signing certificate authority MacOS system keychain, using a procedure similar to the one detailed at the Apple knowledge base. Be sure to add the signing CA’s certificate and not the server’s certificate.

« Users are frequently locked out of Active Directory SSLHandshakeException causes connections to fail »