WARNING: Version 6.1 of the Elastic Stack has passed its EOL date.

This documentation is no longer being maintained and may be removed. If you are running this version, we strongly advise you to upgrade. For the latest information, see the current release documentation.

« Users are frequently locked out of Active Directory SSLHandshakeException causes connections to fail »
Elastic Docs ›X-Pack for the Elastic Stack [6.1] ›Troubleshooting ›X-Pack security Troubleshooting

Certificate verification fails for curl on Mac

edit
IMPORTANT: This documentation is no longer updated. Refer to Elastic's version policy and the latest documentation.

Certificate verification fails for curl on Mac

edit

Symptoms:

  • curl on the Mac returns a certificate verification error even when the --cacert option is used.

Resolution:

Apple’s integration of curl with their keychain technology disables the --cacert option. See http://curl.haxx.se/mail/archive-2013-10/0036.html for more information.

You can use another tool, such as wget, to test certificates. Alternately, you can add the certificate for the signing certificate authority MacOS system keychain, using a procedure similar to the one detailed at the Apple knowledge base. Be sure to add the signing CA’s certificate and not the server’s certificate.

« Users are frequently locked out of Active Directory SSLHandshakeException causes connections to fail »