Getting error(60): SSL certificate problem: unable to get local issuer certificate (attempts: 1) during MIP configuration.

Products

• Data Loss Prevention

Issue/Introduction

During your initial testing of MIP integration with DLP detection server(s), you receive the following error: 

 

curl_easy_perform() error(60): SSL certificate problem: unable to get local issuer certificate(attempts: 1)

Environment

Release : 15.8, 16.1

Component : DLP Detection with MIP

Cause

This is likely due to network/proxy certificate error from the server hosting DLP. This error is not caused by the DLP software. 

 

Resolution

This can be caused by invalid root cert being presented by the Microsoft server when validating a connection request. Or the server is presenting an invalid cert that is not trusted by the proxy server. 

Its advised to run a packet capture on the detection server if you are unsure about the connection attempts.