cURL error 60: SSL certificate problem: certificate has expired

Question

We running 2 application on amazon ec2 (backend.abc.com & frontend.abc.com). For that application, we used a paid SSL Certificate. That

Answer 1

A permanent solution would be to reissue the SSL certificate from your provider and reinstall it on your server.

The reissued certificate would update the CA bundle.

Cheers!

Answer 2

If you're having this issue with "curl" (or similar) on a Ubuntu 16 system, here's how we fixed it:

On the Ubuntu 16 system hosting the curl / app that fails:

• nano /etc/ca-certificates.conf
• Remove the line (or comment) specifying AddTrust_External_Root.crt
• apt update && apt install ca-certificates
• update-ca-certificates -f -v
• Try curl again with the URL that was failing before - hopefully it works now :)