I have a server setup that has an HTTPS certificate issued by a major certificate provider (DigiCert). The certificate is recognized by all of the browsers on a machine running Windows Server 2008 R2, including Internet Explorer, Chrome, and Firefox.
However, the certificate is not recognized within Cygwin. For example, I get this error when I try to clone a git URL from this server:
error: SSL certificate problem: unable to get local issuer certificate while accessing [URL]
fatal: HTTP request failed
Other tools within Cygwin I have tried give the same error, such as curl:
curl: (60) SSL certificate problem: unable to get local issuer certificate
Digicert has the exact certificate I need. My ideal solutions would be to either update the bundle of certificates that Cygwin uses or to manually install the needed certificate. It seems like Cygwin has a separate certificate store from Windows. How can I do this?
Note: I do not want to simply ignore the error, as many users use this machine and will need to access the same server, so it would not make sense to ignore each time.
gnutls-cli <server> -p 443
or ssl-tools.net/webservers are good ways to check from the outside. If you have Cygwin's ca-certificates package installed, then I'm sure it uses the Mozilla bundle which certainly has DigiCert.