Re: Error=unable to get local issuer certificate server

2020-03-01 Thread Jeremy Payne
If ATS to origin cert validation is failing, then you may need to disable server verify(that's if your company security policy allows). Couple different approaches.. https://docs.trafficserver.apache.org/en/latest/admin-guide/files/sni.yaml.en.html#override-verify-origin-server https://docs.traf

Error=unable to get local issuer certificate server

2020-03-01 Thread juergenp[core]
Hello, i run ATS10 the origin server has a private ip with existing DNS entry pointing to that (i know unsafe -but it's a work-around - split-dns config is a bit confusing, because ats still does round robin on the dns-servers i entered in /etc/resolve.conf) the certificate i have installe

Re: Error=unable to get local issuer certificate server

2020-03-01 Thread Jeremy Payne
also.. using curl(without the insecure option), can you poll the origin server directly without receiving a certificate error ? On Sun, Mar 1, 2020 at 10:59 AM Jeremy Payne wrote: > > If ATS to origin cert validation is failing, then you may need to > disable server verify(that's if your company