知乎，让每一次点击都充满意义 —— 欢迎来到知乎，发现问题背后的世界。 ConradoConrado 74655 silver badges1515 bronze badges three I just tried even the CA's certificate with use: keyCertSign, the trouble is exact. Plainly the CA cert or the foundation cert needs to be additional to openssl's certsDB (/and so on/ssl/certs/ca-certificates.crt) My solution was to find an analogous server https://geoffreyo271glr1.vblogetin.com/profile