Not able to get any package due to SSL error

[sidgujrathi]

I am getting this error: curl: (60) SSL certificate problem: unable to get local issuer certificate while trying to get any package from OPM

[xlibor]

It is recommended to refer to this article: https://kb.vmware.com/s/article/78471

[damienburke]

I have the issue to. Here is a basic Dockerfile where you can recreate issue. I am on latest openresty base image, and updating the certificates, but still get the SSL error. My only workaround is to manually add the certificate from https://opm.openresty.org/ which is not ideal.

FROM openresty/openresty:1.21.4.2rc1-0-alpine-fat

RUN apk add --no-cache ca-certificates && \
    update-ca-certificates

RUN opm install p0pr0ck5/lua-resty-cookie

CMD ["/usr/local/openresty/nginx/sbin/nginx", "-g", "daemon off;"]
EXPOSE 8080

Full Error:

 > [3/3] RUN opm install p0pr0ck5/lua-resty-cookie:                                                                                                                                                                                     
#6 0.286 * Fetching p0pr0ck5/lua-resty-cookie  
#6 0.810 curl: (60) SSL certificate problem: unable to get local issuer certificate
#6 0.810 More details here: https://curl.se/docs/sslcerts.html
#6 0.810 
#6 0.810 curl failed to verify the legitimacy of the server and therefore could not
#6 0.810 establish a secure connection to it. To learn more about this situation and
#6 0.810 how to fix it, please visit the web page mentioned above.
#6 0.814 ERROR: failed to run command "curl -sS -i -A 'opm 0.0.7 (x86_64-linux-thread-multi, perl v5.36.0)' 'https://opm.openresty.org/api/pkg/fetch?account=p0pr0ck5&name=lua-resty-cookie&op=&version='"
-