Unix curl（60）无法获取本地颁发者证书

我试图使用curl连接到onedriveapi（），但它使我

curl: (60) SSL certificate problem: unable to get local issuer certificate

该页面在Firefox中打开时没有证书警告。我检查了证书信息，将所有三个证书（Baltimore CyberTrust Root、Microsoft IT SSL SHA2和storage.live.com）放入/usr/share/ca证书中，并使用

dpkg-reconfigure ca-certificates

然而，我不断地得到这个错误。有什么想法吗

me@host:~$ curl -vi https://api.onedrive.com
* Rebuilt URL to: https://api.onedrive.com/
* Hostname was NOT found in DNS cache
*   Trying 134.170.109.152...
* Connected to api.onedrive.com (134.170.109.152) port 443 (#0)
* successfully set certificate verify locations:
*   CAfile: /etc/ssl/certs/ca-certificates.crt
  CApath: /etc/ssl/certs/
* SSLv3, TLS handshake, Client hello (1):
* SSLv3, TLS handshake, Server hello (2):
* SSLv3, TLS handshake, CERT (11):
* SSLv3, TLS alert, Server hello (2):
* SSL certificate problem: unable to get local issuer certificate
* Closing connection 0
curl: (60) SSL certificate problem: unable to get local issuer certificate
More details here: http://curl.haxx.se/docs/sslcerts.html

curl performs SSL certificate verification by default, using a "bundle"
 of Certificate Authority (CA) public keys (CA certs). If the default
 bundle file isn't adequate, you can specify an alternate file
 using the --cacert option.
If this HTTPS server uses a certificate signed by a CA represented in
 the bundle, the certificate verification probably failed due to a
 problem with the certificate (it might be expired, or the name might
 not match the domain name in the URL).
If you'd like to turn off curl's verification of the certificate, use
 the -k (or --insecure) option.

me@host:~$ curl -V
curl 7.38.0 (x86_64-pc-linux-gnu) libcurl/7.38.0 OpenSSL/1.0.1k zlib/1.2.8 libidn/1.29 libssh2/1.4.3 librtmp/2.3
Protocols: dict file ftp ftps gopher http https imap imaps ldap ldaps pop3 pop3s rtmp rtsp scp sftp smtp smtps telnet tftp 
Features: AsynchDNS IDN IPv6 Largefile GSS-API SPNEGO NTLM NTLM_WB SSL libz TLS-SRP 

---

你有什么证书？也许你是在某些SSL拦截设备后面，所以你需要与原始设备不同的证书？以及您使用的curl的版本：将

curl-V

的输出添加到您的问题中。添加

curl-V

。没有代理等-只是一个简单的家庭路由器。我试过的其他https网站。你得到了什么证书？也许你是在某些SSL拦截设备后面，所以你需要与原始设备不同的证书？以及您使用的curl的版本：将

curl-V

的输出添加到您的问题中。添加

curl-V

。没有代理等-只是一个简单的家庭路由器。其他https网站我也尝试过。