Hi Michael,
Thanks for getting back. Good you did as I was wrong!
Here's what's failing under Debian Jessie:
echo GET | openssl s_client -CApath /etc/ssl/certs/ -connect
us9.api.mailchimp.com:443 2>&1 | head -n5
depth=2 C = IE, O = Baltimore, OU = CyberTrust, CN = Baltimore
CyberTrust Root
verify error:num=20:unable to get local issuer certificate
verify return:0
I tracked this down to the following change in ca-certificates.conf:
Was:
mozilla/GTE_CyberTrust_Global_Root.crt
Is:
#!mozilla/GTE_CyberTrust_Global_Root.crt
By adding that certificate back in (from a local Ubuntu), adding it back
to /etc/ca-certificates.conf and running update-ca-certificates,
Mailchimp's API works again.
Hope this is useful, I have to admit I'm at the limit of my
understanding on this!
Thanks,
Rich
On 05/02/16 15:40, Michael Shuler wrote:
On 02/05/2016 05:49 AM, Rich wrote:
subject says it all.
Please provide a specific URL to test. The "Baltimore CyberTrust Root"
CA may be a different issue, looking at several mozilla bugzilla
tickets, but I can't tell without any detail.
Thanks, Michael