Final test: Web stack

Read the output

Lab Root CA is in the trust store. What fixes the error?

$ curl https://app.lab.test/
curl: (60) SSL certificate problem: unable to get local issuer certificate
$ openssl s_client -connect app.lab.test:443 </dev/null 2>/dev/null | grep -A1 ' s:'
 0 s:CN = app.lab.test
   i:O = Lab, CN = Lab Issuing CA

• A Have Lab Issuing CA issue the site certificate again.
• B Request the site with curl --cacert lab-issuing-ca.crt.
• C Add Lab Issuing CA to the trust store of the nginx server.
• D A chain file — the site certificate and Lab Issuing CA — in ssl_certificate, then a reload.