ERROR SSL certificate verification failed: unable to get issuer certificate (err: 2)


#1 JLai

Hello,

I am getting the following error message with the SSL configured using om_ssl . Has anyone encountered this issue in the past? The config works without SSL but I want to make SSL to work.Please note that some information has been modified to avoid sensitive information exposure.

2024-03-20 00:26:21 INFO connecting to destination_host:###
2024-03-20 00:26:21 INFO successfully connected to destination_host:###
2024-03-20 00:26:21 INFO reconnecting in 1 seconds
2024-03-20 00:26:21 ERROR SSL certificate verification failed: unable to get issuer certificate (err: 2)

This is my nxlog agent config code snippet:

...
<Output out_to_destination>
    Module          om_ssl
    Host    	    %OUTPUT_DESTINATION_HOST%
    Port    	    %OUTPUT_DESTINATION_PORT%
    Exec    	    $Message = to_json(); to_syslog_bsd();
    CAFile          %CERTDIR%\CA.pem
    CertFile        %CERTDIR%\client-cert.pem
    CertKeyFile     %CERTDIR%\client-key.pem
    AllowUntrusted  TRUE
</Output>
...

Is there anyway to bypass verification? Is this issue on the nxlog agent side?