DEV Community

Raul Jonatan
Raul Jonatan

Posted on

SSL verification error at depth 2 - Zscaler | WSL

#development #ubuntu #wsl

Error using gem 

gem install asciidoctor-pdf
ERROR:  SSL verification error at depth 2: unable to get local issuer certificate (20)
ERROR:  You must add /......../=Zscaler Root CA/emailAddress=support@zscaler.com to your local trusted store
ERROR:  SSL verification error at depth 2: unable to get local issuer certificate (20)
ERROR:  You must add /......../=Zscaler Root CA/emailAddress=support@zscaler.com to your local trusted store
ERROR:  SSL verification error at depth 2: unable to get local issuer certificate (20)
ERROR:  You must add /......../=Zscaler Root CA/emailAddress=support@zscaler.com to your local trusted store
ERROR:  Could not find a valid gem 'asciidoctor-pdf' (>= 0), here is why:
          Unable to download data from https://rubygems.org/ - SSL_connect returned=1 errno=0 peeraddr=151.101.1.227:443 state=error: certificate verify failed (unable to get local issuer certificate) (https://rubygems.org/specs.4.8.gz)
ERROR:  SSL verification error at depth 2: unable to get local issuer certificate (20)
ERROR:  You must add /......../=Zscaler Root CA/emailAddress=support@zscaler.com to your local trusted store
ERROR:  SSL verification error at depth 2: unable to get local issuer certificate (20)
ERROR:  You must add /......../=Zscaler Root CA/emailAddress=support@zscaler.com to your local trusted store
Enter fullscreen mode Exit fullscreen mode

Steps for solve

Download cerfiticate from zscaler

  • download certified

  • save

  • Copy the exported .crt file and place it in a directory accessible from WSL, such as your user home. in this case zscaler.crt file was download on home folder of user 
julnarot@artanis:~$ cd
julnarot@artanis:~$ 
julnarot@artanis:~$ ls
 develop   oradiag_julnarot   scripts   zscaler.crt
Enter fullscreen mode Exit fullscreen mode
  • Add the certificate to WSL trusted certificates 
julnarot@artanis:~$ sudo cp zscaler.crt /usr/local/share/ca-certificates/zscaler.crt
[sudo] password for julnarot: 
julnarot@artanis:~$ sudo update-ca-certificates
Updating certificates in /etc/ssl/certs...
rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL
1 added, 0 removed; done.
Running hooks in /etc/ca-certificates/update.d...
done.
Enter fullscreen mode Exit fullscreen mode
  • Now try install some dependency with gem 
julnarot@artanis:~$ gem install asciidoctor-pdf
Fetching ttfunk-1.7.0.gem
...
Fetching concurrent-ruby-1.3.4.gem
Fetching asciidoctor-2.0.23.gem
Successfully installed ttfunk-1.7.0
Successfully installed polyglot-0.3.5
...
Successfully installed asciidoctor-pdf-2.3.19
Parsing documentation for ttfunk-1.7.0
Installing ri documentation for ttfunk-1.7.0
...
Done installing documentation for ttfunk, polyglot, treetop, pdf-core, prawn, ruby-rc4, hashery, Ascii85, afm, pdf-reader, prawn-templates, prawn-table, public_suffix, addressable, css_parser, prawn-svg, prawn-icon, concurrent-ruby, asciidoctor, asciidoctor-pdf after 8 seconds
20 gems installed
Enter fullscreen mode Exit fullscreen mode

Top comments (0)

Read next

silviaespanagil profile image

How to Easily Use Feature Flags in Swift with Firebase

Silvia España Gil -

tauantcamargo profile image

How ts-pattern can improve your code readability?

Tauan Camargo -

cyanspray profile image

Postman: How to Create Collections with API Key?

John Doe -

samuel_kinuthia profile image

Understanding and Managing Technical Debt: The Hidden Cost of Rapid Development

Samuel Kinuthia -