curl NSS error -8179 (SEC_ERROR_UNKNOWN_ISSUER)

尝试分析

首先根据提示，我判断是CA证书过时。因而对证书进行了更新

update-ca-trust

可是依然没有解决问题。以后，尝试了不少方法后，从新回来想一想，为何不适用curl -v来获取更多信息呢？因而使用该命令进行再次尝试。

[root@localhost ~]# curl https://www.baidu.com -v

NSS error -8179 (SEC_ERROR_UNKNOWN_ISSUER)

参考：https://www.cnblogs.com/xuxinkun/p/5417836.html

参考：https://stackoverflow.com/questions/275878/firefox-and-ssl-sec-error-unknown-issuer

Just had the same problem with a Comodo Wildcard SSL cert.

After reading the docs the solution is to ensure you include the certificate chain file they send you in your config i.e.

　　　　　　　　SSLCertificateChainFile /etc/ssl/crt/yourSERVERNAME.ca-bundle