[SOLVED] v4.4.1.0 unable to get local issuer certificate (20)

aput · Post by **aput** » Tue May 16, 2017 11:01 am

Even after upgrading to v4.4.1.0 I still get SSL errors (unable to get local issuer certificate (20))
See error text below.
No errors when I add the server as an exception in PPTweaker -> Certificates, but I do not know if that is a proper solution.

Is this something I can / should fix?

Tx, Andre

Code: Select all

--- Version ---
OS: Windows 7 
POP Peeper: 4.4.1.0
Webmail: 4.4.1.0
SSL: 1.0.2.11
IMAP: 4.4.0.0
RSS: 4.0.0.2010
SendMail: 4.1.0.0
Notification Voice: 4.0.0.2010 (disabled)
Profile Picture: 4.3.0.0

--- Error ---
******-**** [1000: IMAP] ['imap.kpnmail.nl' (993) SSL: 1] [ClientSend: '' (0) SSL: 0] [Consec: 3]
- SSL connection failed (certificate failed: unable to get local issuer certificate (20))

Post by **Jeff** » Tue May 16, 2017 1:09 pm

I've just updated the cacert.pem file available at the following URL. This file contains a much larger list of certificates and I've verified that it will work with imap.kpnmail.nl

To update cacert.pem, see this post (point #3):
viewtopic.php?f=2&t=6846&p=34501#p34501

After installing, be sure to remove the Exception from [Tools / PPtweaker / Certificates] and then retest your account(s).

Please reply back and confirm whether this works for you.

aput · Post by **aput** » Tue May 16, 2017 2:54 pm

Jeff wrote:To update cacert.pem, see this post (point #3):
viewtopic.php?f=2&t=6846&p=34501#p34501

SOLVED by updating cacert.pem as instructed above.
Thanks, Andre

user512 · Post by **user512** » Mon Sep 03, 2018 4:34 am

Sorry to bump an old thread, but I'm having exacly the same problem since sep-2-2018. When checking my gmail account I get error:
---
my_Gmail_account
SSL connection failed (certificate failed: unable to get local issuer certificate [2] (20))
---

When hit on webtest I get:
Sever response 200
and the clipboard content is:
---
--- Version ---
OS: Windows 8.1 (x64)
POP Peeper: 4.5.1.0
Webmail: 4.5.4.0
SSL: 1.0.2.11
IMAP: 4.5.1.0
SendMail: 4.5.0.0
Profile Picture: 4.3.0.0 (disabled)
AntiJunk: 4.2.0.0 (disabled)
Spell Checker: 4.2.0.0 (disabled)
Web of Trust: 4.2.0.0 (disabled)

--- Web Test ---
Result: 200
Error:
Time: 10:26:05 - 10:26:05 (0 s) (+0200)
Data: Mon, 03 Sep 2018 01:26:06 -0700

--- Error ---
Gmail xxxx [1000: IMAP] ['imap.gmail.com' (993) SSL: 1] [Smtp: 'smtp.gmail.com' (465) SSL: 1] [Consec: 1]
- SSL connection failed (certificate failed: unable to get local issuer certificate [2] (20))
---

I have tried to copy the .pem file, as advised in previous post, to the SslCerts folder and overwrite but same results. Finally I went to -> tools -> pptweaker -> certificates - Disable the ssl use. It does work now and emails have been downloaded. I suppose without encription. But at least it works. Any thing to try to fix the ssl certificate?. It has always worked to me until yesterday.

Thanks!.

Post by **spc3rd** » Mon Sep 03, 2018 8:28 am

Hi user512,

Sorry to hear of the problem you are having, and thank you for including the error message info too.

Please have a look at the following recent topic:

viewtopic.php?p=36331#p36331

The Gmail issue being reported by several members is nearly identical to the one you are experiencing.

Please post back and let us know if the info provided by Jeff and lakrsrool in the discussion was of help to you.

Other members of The Esumsoft Team *may stop by later to further review your topic, and provide additional feedback.
* [NOTE: Today is a Federal Holiday here].

Best regards,

user512 · Post by **user512** » Tue Sep 04, 2018 4:07 am

SOLVED!. Tried directly method 2.

-Export avast certificate in .der file from avast -> settings -> mailshield -> customize -> ssl scanning -> export
-Imported to windows doubleclick *.der file.
-check marked tools -> pptweaker -> certif -> enable hostname mathching.

Problem solved. Thanks Jeff and spc3rd.

background info (I have avast running):

---
my_Gmail_account
SSL connection failed (certificate failed: unable to get local issuer certificate [2] (20))
---

When hit on webtest I get:
Sever response 200
and the clipboard content is:
---
--- Version ---
OS: Windows 8.1 (x64)
POP Peeper: 4.5.1.0
Webmail: 4.5.4.0
SSL: 1.0.2.11
IMAP: 4.5.1.0
SendMail: 4.5.0.0
Profile Picture: 4.3.0.0 (disabled)
AntiJunk: 4.2.0.0 (disabled)
Spell Checker: 4.2.0.0 (disabled)
Web of Trust: 4.2.0.0 (disabled)

--- Web Test ---
Result: 200
Error:
Time: 10:26:05 - 10:26:05 (0 s) (+0200)
Data: Mon, 03 Sep 2018 01:26:06 -0700

--- Error ---
Gmail xxxx [1000: IMAP] ['imap.gmail.com' (993) SSL: 1] [Smtp: 'smtp.gmail.com' (465) SSL: 1] [Consec: 1]
- SSL connection failed (certificate failed: unable to get local issuer certificate [2] (20))

Post by **spc3rd** » Tue Sep 04, 2018 4:40 am

Hello again user512,

Thank you for updating us, and glad the information Jeff and lakrsrool provided in the topic referenced in my previous post helped resolve the issue you were having!

(I was looking for your reply in this discussion thread, but found it in this topic instead).
I moved it here since this is where your initial inquiry is located.

Just for future reference - please be sure to post your replies in the same topic where you presented your initial inquiry.

Thanks very much again for letting us know how things worked-out!

Cheers!

Esumsoft Forums