Self host CA throws cURL error 60: Peer's Certificate issuer is not recognized error

🚧 Installation
1

have a self hosted CA that works fine with other applications. When i try to install Nextcloud with the CA installed I keep getting following error in the log

GuzzleHttp\Exception\RequestException: cURL error 60: Peer’s Certificate issuer is not recognized.

  1. /var/www/nextcloud/3rdparty/guzzlehttp/guzzle/src/RequestFsm.php - line 103: GuzzleHttp\Exception\RequestException wrapException(Object(GuzzleHttp\Message\Request), Object(GuzzleHttp\Ring\Exception\RingException))
  2. /var/www/nextcloud/3rdparty/guzzlehttp/guzzle/src/RequestFsm.php - line 132: GuzzleHttp\RequestFsm->__invoke(Object(GuzzleHttp\Transaction))
  3. /var/www/nextcloud/3rdparty/react/promise/src/FulfilledPromise.php - line 25: GuzzleHttp\RequestFsm->GuzzleHttp{closure}(*** sensitive parameters replaced ***)
  4. /var/www/nextcloud/3rdparty/guzzlehttp/ringphp/src/Future/CompletedFutureValue.php - line 55: React\Promise\FulfilledPromise->then(Object(Closure), NULL, NULL)
  5. /var/www/nextcloud/3rdparty/guzzlehttp/guzzle/src/Message/FutureResponse.php - line 43: GuzzleHttp\Ring\Future\CompletedFutureValue->then(Object(Closure), NULL, NULL)
  6. /var/www/nextcloud/3rdparty/guzzlehttp/guzzle/src/RequestFsm.php - line 134: GuzzleHttp\Message\FutureResponse proxy(Object(GuzzleHttp\Ring\Future\CompletedFutureArray), Object(Closure))
  7. /var/www/nextcloud/3rdparty/guzzlehttp/guzzle/src/Client.php - line 165: GuzzleHttp\RequestFsm->__invoke(Object(GuzzleHttp\Transaction))
  8. /var/www/nextcloud/3rdparty/guzzlehttp/guzzle/src/Client.php - line 125: GuzzleHttp\Client->send(Object(GuzzleHttp\Message\Request))
  9. /var/www/nextcloud/lib/private/Http/Client/Client.php - line 138: GuzzleHttp\Client->get(‘https //www.goo…’, Array)
  10. /var/www/nextcloud/settings/Controller/CheckSetupController.php - line 130: OC\Http\Client\Client->get(‘https //www.goo…’)
  11. /var/www/nextcloud/settings/Controller/CheckSetupController.php - line 112: OC\Settings\Controller\CheckSetupController->isSiteReachable(‘www.google.com’)
  12. /var/www/nextcloud/settings/Controller/CheckSetupController.php - line 426: OC\Settings\Controller\CheckSetupController->isInternetConnectionWorking()
  13. [internal function] OC\Settings\Controller\CheckSetupController->check()
  14. /var/www/nextcloud/lib/private/AppFramework/Http/Dispatcher.php - line 161: call_user_func_array(Array, Array)
  15. /var/www/nextcloud/lib/private/AppFramework/Http/Dispatcher.php - line 91: OC\AppFramework\Http\Dispatcher->executeController(Object(OC\Settings\Controller\CheckSetupController), ‘check’)
  16. /var/www/nextcloud/lib/private/AppFramework/App.php - line 115: OC\AppFramework\Http\Dispatcher->dispatch(Object(OC\Settings\Controller\CheckSetupController), ‘check’)
  17. /var/www/nextcloud/lib/private/AppFramework/Routing/RouteActionHandler.php - line 47: OC\AppFramework\App main(‘OC\Settings\Con…’, ‘check’, Object(OC\AppFramework\DependencyInjection\DIContainer), Array)
  18. [internal function] OC\AppFramework\Routing\RouteActionHandler->__invoke(Array)
  19. /var/www/nextcloud/lib/private/Route/Router.php - line 297: call_user_func(Object(OC\AppFramework\Routing\RouteActionHandler), Array)
  20. /var/www/nextcloud/lib/base.php - line 999: OC\Route\Router->match(’/settings/ajax/…’)
  21. /var/www/nextcloud/index.php - line 42: OC handleRequest()
  22. {main}

I tried adding the CA to the /var/www/nextcloud/resources/config/ca-bundle.crt and restarting but that did nothing.

I have done this wth previous versions without issue.

2

Have you updated the certificate list with

update-ca-certificates --fresh

?