Ubuntu 22.04 LTS – OpenSSL certificate chain errors break wget and curl

📖 ~1 min read

Table of contents

1. Symptom & Impact
2. Environment & Reproduction
3. Root Cause Analysis
4. Quick Triage
5. Step-by-Step Diagnosis
6. Solution – Primary Fix
7. Solution – Alternative Approaches
8. Verification & Acceptance Criteria
9. Rollback Plan
10. Prevention & Hardening
11. Related Errors & Cross-Refs
12. References & Further Reading

Symptom & Impact

HTTPS downloads fail with certificate verify errors across tools.

Environment & Reproduction

Common after broken CA updates, clock drift, or custom proxy interception.

Root Cause Analysis

System CA bundle is outdated, corrupted, or missing required trust anchors.

Quick Triage

Check CA package status and verify trust-store files exist.

Step-by-Step Diagnosis

Test certificate chain against destination and inspect failing issuer info.

Solution – Primary Fix

Reinstall CA packages and rebuild trust store.

Solution – Alternative Approaches

If behind enterprise TLS inspection, import approved internal root certificate.

Verification & Acceptance Criteria

HTTPS requests succeed without certificate verify failures.

Rollback Plan

Remove custom CA additions if they cause trust conflicts.

Prevention & Hardening

Track CA updates and validate trust-chain changes in staging first.

Related Errors & Cross-Refs

Related to SSL certificate problem unable to get local issuer certificate.

Related tutorial: View the step-by-step tutorial for Ubuntu 22.04 LTS.

View all Ubuntu 22.04 LTS tutorials on the Tutorials Hub →

Browse all common problems & solutions on the Tutorials Hub.

References & Further Reading

Ubuntu 22.04 CA trust store and OpenSSL verification references.