DEV Community

Raul Jonatan
Raul Jonatan

Posted on

1

SSL verification error at depth 2 - Zscaler | WSL

Error using gem

gem install asciidoctor-pdf
ERROR:  SSL verification error at depth 2: unable to get local issuer certificate (20)
ERROR:  You must add /......../=Zscaler Root CA/emailAddress=support@zscaler.com to your local trusted store
ERROR:  SSL verification error at depth 2: unable to get local issuer certificate (20)
ERROR:  You must add /......../=Zscaler Root CA/emailAddress=support@zscaler.com to your local trusted store
ERROR:  SSL verification error at depth 2: unable to get local issuer certificate (20)
ERROR:  You must add /......../=Zscaler Root CA/emailAddress=support@zscaler.com to your local trusted store
ERROR:  Could not find a valid gem 'asciidoctor-pdf' (>= 0), here is why:
          Unable to download data from https://rubygems.org/ - SSL_connect returned=1 errno=0 peeraddr=151.101.1.227:443 state=error: certificate verify failed (unable to get local issuer certificate) (https://rubygems.org/specs.4.8.gz)
ERROR:  SSL verification error at depth 2: unable to get local issuer certificate (20)
ERROR:  You must add /......../=Zscaler Root CA/emailAddress=support@zscaler.com to your local trusted store
ERROR:  SSL verification error at depth 2: unable to get local issuer certificate (20)
ERROR:  You must add /......../=Zscaler Root CA/emailAddress=support@zscaler.com to your local trusted store
Enter fullscreen mode Exit fullscreen mode

Steps for solve

Download cerfiticate from zscaler

  • download certified

  • save

  • Copy the exported .crt file and place it in a directory accessible from WSL, such as your user home. in this case zscaler.crt file was download on home folder of user
julnarot@artanis:~$ cd
julnarot@artanis:~$ 
julnarot@artanis:~$ ls
ο„• develop  ο„• oradiag_julnarot  ο’‰ scripts  ο€– zscaler.crt
Enter fullscreen mode Exit fullscreen mode
  • Add the certificate to WSL trusted certificates
julnarot@artanis:~$ sudo cp zscaler.crt /usr/local/share/ca-certificates/zscaler.crt
[sudo] password for julnarot: 
julnarot@artanis:~$ sudo update-ca-certificates
Updating certificates in /etc/ssl/certs...
rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL
1 added, 0 removed; done.
Running hooks in /etc/ca-certificates/update.d...
done.
Enter fullscreen mode Exit fullscreen mode
  • Now try install some dependency with gem
julnarot@artanis:~$ gem install asciidoctor-pdf
Fetching ttfunk-1.7.0.gem
...
Fetching concurrent-ruby-1.3.4.gem
Fetching asciidoctor-2.0.23.gem
Successfully installed ttfunk-1.7.0
Successfully installed polyglot-0.3.5
...
Successfully installed asciidoctor-pdf-2.3.19
Parsing documentation for ttfunk-1.7.0
Installing ri documentation for ttfunk-1.7.0
...
Done installing documentation for ttfunk, polyglot, treetop, pdf-core, prawn, ruby-rc4, hashery, Ascii85, afm, pdf-reader, prawn-templates, prawn-table, public_suffix, addressable, css_parser, prawn-svg, prawn-icon, concurrent-ruby, asciidoctor, asciidoctor-pdf after 8 seconds
20 gems installed
Enter fullscreen mode Exit fullscreen mode

Do your career a big favor. Join DEV. (The website you're on right now)

It takes one minute, it's free, and is worth it for your career.

Get started

Community matters

Top comments (0)

πŸ‘‹ Kindness is contagious

Explore a sea of insights with this enlightening post, highly esteemed within the nurturing DEV Community. Coders of all stripes are invited to participate and contribute to our shared knowledge.

Expressing gratitude with a simple "thank you" can make a big impact. Leave your thanks in the comments!

On DEV, exchanging ideas smooths our way and strengthens our community bonds. Found this useful? A quick note of thanks to the author can mean a lot.

Okay