I am trying to do a curl request using a client certificate like so:

curl -E my.pem https://some.site

And I get the following error message:

curl: (35) error:14094418:SSL routines:SSL3_READ_BYTES:tlsv1 alert unknown ca
  • What does this mean?
  • Is this complaint coming from the server to which I am connecting, or my curl client?
  • (How do I determine) what is the ca in this context?
  • How do I make it such that the ca is known?
  • From the curl manual: curl.haxx.se/docs/sslcerts.html – HBruijn Aug 2 '16 at 4:40
  • I already read that but I still don't know. Could you humor me and answer one of my bullet points? – grasevski Aug 2 '16 at 5:33
  • Eg is it client complaining, as opposed to server? yes or no will do. – grasevski Aug 2 '16 at 5:34
  • It's the client that validates the server's credentials. – Julie Pelletier Aug 2 '16 at 6:03

If the server sends you a TLS alert unknown ca like in this case then the server does not accept the client certificate you have send (-E my.pem). One reason for this might be that you have used the wrong certificate. Another reason might be that you've used the correct certificate but failed to add the necessary chain certificates.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.