Page 1 of 1

X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT_LOCALLY_ISSUE

Posted: Mon Jun 24, 2019 11:58 am
by samidha
Hello,
I am Getting an Error while trying to access https://efilingigr.maharashtra.gov.in/ via SafeSquid proxy.
SafeSquid is displaying template :
SSL Connection to efilingigr.maharashtra.gov.in:443 denied
X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT_LOCALLY: The issuer certificate of a locally looked up certificate could not be found. This normally means that the list of trusted certificates is not complete.

Re: X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT_LOCALLY_ISSUE

Posted: Mon Jun 24, 2019 11:59 am
by samidha
Use SSL Checker, simply enter your server's hostname (must be public) in the box below and click the Check SSL button.
You should get warning

No SSL certificates were found on efilingigr.maharashtra.gov.in. Make sure that the name resolves to the correct server and that the SSL port (default is 443) is open on your server's firewall.

You should tweet ....

Re: X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT_LOCALLY_ISSUE

Posted: Mon Jun 24, 2019 11:59 am
by samidha
In all the modern browsers "X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT_LOCALLY" can be bypassed by just adding an exception when you visit the website.
But when such websites when you access via SafeSquid proxy, SafeSquid will directly blocked you without giving you access.

The Error Template will Displayed as shown and you cannot access the website
SSL Connection to efilingigr.maharashtra.gov.in:443 denied
X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT_LOCALLY: The issuer certificate of a locally looked up certificate could not be found. This normally means that the list of trusted certificates is not complete.

The Error Template explains about the type of SSL Verification check that the particular website FAILED at.
The error that you see above tells that the list of trusted certificates is not complete. efilingigr.maharashtra.gov.in Make sure that the name resolves to the correct server and that the SSL port (default is 443) is open on your server's firewall.

We do not allow users to access such kind of websites.
If this is an company approved website which is used by company for any kind of important use case and the company have setup an self signed SSL Certificate for security measures.
The above template will be seen when you access that site
In our case it is :https://efilingigr.maharashtra.gov.in/

Re: X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT_LOCALLY_ISSUE

Posted: Mon Jun 24, 2019 11:59 am
by samidha
SafeSquid can bypass " X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT_LOCALLY " this error by making a policy for SSL bypass. And you can successfully access your Internal Site https://efilingigr.maharashtra.gov.in/
But we can not recommend that solution. Because SafeSquid is Secured web Gateway and it is against the policy of Web Security.