On Fri, Mar 06, 2026 at 04:06:51PM -0600, James Jerkins wrote: > "SSL error:unable to get local issuer certificate" > > Checking the certs returned via the command line shows certs for cvsweb > and the intermediate. > > CONNECTED(00000003) > depth=0 CN = cvsweb.openbsd.org > verify error:num=20:unable to get local issuer certificate > verify return:1 > --- > Certificate chain > 0 s:/CN=cvsweb.openbsd.org > i:/C=US/O=Let's Encrypt/CN=R12 > -----BEGIN CERTIFICATE----- > > Can the new cvsweb send the full certificate chain or is this a > Lynx problem?
It's not just a lynx problem, ftp(1) also throws a certificate verification. For testing purposes you can force ftp(1) to ignore it with '-S dont'.

