Why is my new Ubuntu 12.04 unable to verify a Verisign ssl certificate?

Run update-ca-certificates --fresh. Some Ubuntu 12.04 installs are missing the symlinks in /etc/ssl/certs (/etc/ssl/certs/ee1365c0.0 etc.) Without the symlinks, apps that rely on them (like openssl, wget, curl) will fail.


You may get more information about what is going on by running:

openssl s_client -connect secure.ogone.com:443

I checked from Centos 5.8, 6.3, and Fedora 17, and they all see the cert chain as perfectly valid.

The connection appears to be SSLv3, SSL_RSA_WITH_RC4_128_MD5, which seems reasonable.