# SSL certificate problem

**URL:** <https://forums.balena.io/t/ssl-certificate-problem/308067>\
**Category:** General\
**Created:** [May 3, 2021, 8:33am UTC](https://forums.balena.io/t/ssl-certificate-problem/308067 "2021-05-03T08:33:38Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![codingecho](https://avatars.discourse-cdn.com/v4/letter/c/e19b73/32.png) [@codingecho](https://forums.balena.io/u/codingecho)\
**Post date:** [May 3, 2021, 8:33am UTC](https://forums.balena.io/t/ssl-certificate-problem/308067/1 "2021-05-03T08:33:38Z")

</div>

> FROM balenalib/rpi-raspbian:latest  
> RUN curl -o- [https://raw.githubusercontent.com/nvm-sh/nvm/v0.38.0/install.sh](https://raw.githubusercontent.com/nvm-sh/nvm/v0.38.0/install.sh) | bash  
> curl: (60) SSL certificate problem: unable to get local issuer certificate

I think balenalib/rpi-raspbian:latest has some problems whit ca-certificates since I have to add these to get it working:

> RUN curl -k -o /tmp/cacert.crt [https://curl.haxx.se/ca/cacert.pem](https://curl.haxx.se/ca/cacert.pem)   
> && mv /tmp/cacert.crt /usr/local/share/ca-certificates/cacert.crt   
> && update-ca-certificates

---

<div class="post-metadata">

**Author:** ![vipulgupta2048](https://avatars.discourse-cdn.com/v4/letter/v/a183cd/32.png) [@vipulgupta2048](https://forums.balena.io/u/vipulgupta2048)\
**Post date:** [May 11, 2021, 10:35am UTC](https://forums.balena.io/t/ssl-certificate-problem/308067/7 "2021-05-11T10:35:13Z")

</div>

Hello,  
Just to test can you try adding another step that updates the ca-certificates. This worked for me.

```auto
FROM balenalib/rpi-raspbian:latest
RUN update-ca-certificates -f
RUN curl -o- https://raw.githubusercontent.com/nvm-sh/nvm/v0.38.0/install.sh | bash

```

---

<div class="post-metadata">

**Author:** ![vipulgupta2048](https://avatars.discourse-cdn.com/v4/letter/v/a183cd/32.png) [@vipulgupta2048](https://forums.balena.io/u/vipulgupta2048)\
**Post date:** [May 11, 2021, 10:35am UTC](https://forums.balena.io/t/ssl-certificate-problem/308067/8 "2021-05-11T10:35:30Z")

</div>

Let us know if it works for you as well.

---

<div class="post-metadata">

**Author:** ![codingecho](https://avatars.discourse-cdn.com/v4/letter/c/e19b73/32.png) [@codingecho](https://forums.balena.io/u/codingecho)\
**Post date:** [May 12, 2021, 8:23pm UTC](https://forums.balena.io/t/ssl-certificate-problem/308067/12 "2021-05-12T20:23:44Z")

</div>

Yes it works. But why is it necessary though? Maybe update your image so it´s not necessary?  
Thanks

---

<div class="post-metadata">

**Author:** ![zwhitchcox](https://avatars.discourse-cdn.com/v4/letter/z/8e7dd6/32.png) [@zwhitchcox](https://forums.balena.io/u/zwhitchcox)\
**Post date:** [May 12, 2021, 9:44pm UTC](https://forums.balena.io/t/ssl-certificate-problem/308067/13 "2021-05-12T21:44:32Z")

</div>

I would guess that decision was made for security reasons, but I’m not sure…I will ping the os team and see if they have a better explanation.

---

<div class="post-metadata">

**Author:** ![nghiant2710](https://avatars.discourse-cdn.com/v4/letter/n/90db22/32.png) [@nghiant2710](https://forums.balena.io/u/nghiant2710)\
**Post date:** [May 21, 2021, 8:49am UTC](https://forums.balena.io/t/ssl-certificate-problem/308067/21 "2021-05-21T08:49:00Z")

</div>

Hi,

Just want to let you know that our images are fixed now, we use debootstrap to create the base images and they are weekly rebuilt so it’s probably something wrong with the default certs in raspbian repositories, however we added an extra step to update the certs so this won’t happen again.

Please let us know if you need further support.