{"action":"opened","issue":{"url":"https://api.github.com/repos/rabbitmq/rabbitmq-server/issues/741","repository_url":"https://api.github.com/repos/rabbitmq/rabbitmq-server","labels_url":"https://api.github.com/repos/rabbitmq/rabbitmq-server/issues/741/labels{/name}","comments_url":"https://api.github.com/repos/rabbitmq/rabbitmq-server/issues/741/comments","events_url":"https://api.github.com/repos/rabbitmq/rabbitmq-server/issues/741/events","html_url":"https://github.com/rabbitmq/rabbitmq-server/issues/741","id":147496281,"number":741,"title":"SSL_handshake error","user":{"login":"HW-Siew","id":10137637,"avatar_url":"https://avatars.githubusercontent.com/u/10137637?v=3","gravatar_id":"","url":"https://api.github.com/users/HW-Siew","html_url":"https://github.com/HW-Siew","followers_url":"https://api.github.com/users/HW-Siew/followers","following_url":"https://api.github.com/users/HW-Siew/following{/other_user}","gists_url":"https://api.github.com/users/HW-Siew/gists{/gist_id}","starred_url":"https://api.github.com/users/HW-Siew/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/HW-Siew/subscriptions","organizations_url":"https://api.github.com/users/HW-Siew/orgs","repos_url":"https://api.github.com/users/HW-Siew/repos","events_url":"https://api.github.com/users/HW-Siew/events{/privacy}","received_events_url":"https://api.github.com/users/HW-Siew/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":0,"created_at":"2016-04-11T17:23:43Z","updated_at":"2016-04-11T17:23:43Z","closed_at":null,"body":"I tried\r\n ```\r\nopenssl s_client -connect localhost:5671 -cert /ssl/cert.pem -key /ssl/key.pem -CAfile /ssl/cacert.pem \r\n```\r\nbut I got ssl handshake error.\r\n`CONNECTED(00000003)\r\ndepth=2 O = Digital Signature Trust Co., CN = DST Root CA X3\r\nverify return:1\r\ndepth=1 C = US, O = Let's Encrypt, CN = Let's Encrypt Authority X3\r\nverify return:1\r\ndepth=0 CN =example.com\r\nverify return:1\r\n139734982039208:error:14094418:SSL routines:SSL3_READ_BYTES:tlsv1 alert unknown ca:s3_pkt.c:1300:SSL alert number 48\r\n139734982039208:error:140790E5:SSL routines:SSL23_WRITE:ssl handshake failure:s23_lib.c:177:\r\n---\r\nCertificate chain\r\n 0 s:/CN=example.com\r\n   i:/C=US/O=Let's Encrypt/CN=Let's Encrypt Authority X3\r\n 1 s:/C=US/O=Let's Encrypt/CN=Let's Encrypt Authority X3\r\n   i:/O=Digital Signature Trust Co./CN=DST Root CA X3\r\n---\r\nServer certificate\r\n-----BEGIN CERTIFICATE-----\r\nMIIFADCCA+ ... BFjjGHK/\r\n-----END CERTIFICATE-----\r\nsubject=/CN=example.com\r\nissuer=/C=US/O=Let's Encrypt/CN=Let's Encrypt Authority X3\r\n---\r\nAcceptable client certificate CA names\r\n/C=US/O=Let's Encrypt/CN=Let's Encrypt Authority X3\r\n---\r\nSSL handshake has read 3041 bytes and written 3776 bytes\r\n---\r\nNew, TLSv1/SSLv3, Cipher is ECDHE-RSA-AES256-SHA384\r\nServer public key is 2048 bit\r\nSecure Renegotiation IS supported\r\nCompression: NONE\r\nExpansion: NONE\r\nSSL-Session:\r\n    Protocol  : TLSv1.2\r\n    Cipher    : ECDHE-RSA-AES256-SHA384\r\n    Session-ID: xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx\r\n    Session-ID-ctx: \r\n    Master-Key: xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx\r\n    Key-Arg   : None\r\n    PSK identity: None\r\n    PSK identity hint: None\r\n    SRP username: None\r\n    Start Time: 1460394293\r\n    Timeout   : 300 (sec)\r\n    Verify return code: 0 (ok)\r\n---`\r\n\r\nWhy the CA is unknown? May I know what can possibly wrong? Thank you.\r\n\r\n"}}