unable to get local issuer certificate (err: 20)
Does anyone have more details about exactly what this error means? I'm using the im_ssl module, and I'm aware there is some issue with validating A certificate, but I am looking for a definitive answer on which certificate that is. I suspect this means that nxlog cannot validate the server which the remote socket is presenting, but I need to be sure.
NXLog does not implement SSL stack by itself, OpenSSL library is used for it. So you can google this error message as it is OpenSSL-originated:
https://www.google.com/search?q=unable+to+get+local+issuer+certificate+(err%3A+20)&oq=unable+to+get+local+issuer+certificate+(err%3A+20)&gs_lcrp=EgZjaHJvbWUyBggAEEUYOTIGCAEQRRg80gEHNTY5ajBqN6gCALACAA&sourceid=chrome&ie=UTF-8
Looks like the certificate presented by the remote host does not suit for CA cert configured at im_ssl. Check the chain of trust, either one of certs is wrong, or some intermediate cert is missing.
