Why do I get "TLS verify result: unable to get local issuer certificate" error when using ca-path for my CA certs?

Detail

The error "TLS verify result: unable to get local issuer certificate" means that the Aerospike Server has been unable to verify the provided certificate against a CA certificate.

Answer

There are 2 common causes of this error:

1. Valid CA certificates have not been placed in the ca-path directory
2. Hashes allowing Aerospike Server to quickly identify which certificate to use are not present. These hashes are symbolic links to the certificates, where the name of the symlink is the hash. These hashes can be generated in one of the following ways:
   1. Running "c_rehash <ca-path-dir>"
   2. Running "openssl rehash <ca-path-dir>"

Notes

c_rehash requires the openssl-perl package to be installed

Applies To Earliest Version

Applies To Latest Version