title: OpenSSL certificate verify failed: Letsencrypt root expired
body: <p>I develop a webapp on my local machine and use the mailtrap.io email testing service to check outgoing emails. I haven't changed anything, but a few days ago the mailtrap service gives back the below error message:</p>
  <pre><code>ErrorException stream_socket_enable_crypto(): SSL operation failed with code 1. OpenSSL Error messages: error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed
  </code></pre>
  <p>Mailtrap advises the following:</p>
  <p><em>Regarding SSL error while trying to send emails to Mailtrap
  You are not alone. Please update your OpenSSL version
  You might hear about the global issue with Letsencrypt certificates: its old root certificate expired on Sep 30. Mostly it impacted clients who use OpenSSL versions prior 1.1.0. The most common solution is to update your OpenSSL. If you can’t do that <a href="https://www.openssl.org/blog/blog/2021/09/13/LetsEncryptRootCertExpire/" rel="nofollow noreferrer">read the recipe</a> for v.1.0.2 from OpenSSL.</em></p>
  <p>Reading the linked article did not really help me to solve the problem.</p>
  <p>In parellel I found <a href="https://www.stephenwagner.com/2021/09/30/sophos-dst-root-ca-x3-expiration-problems-fix/" rel="nofollow noreferrer">this page</a> explaining how to install some new certificates to avoid similar problems, but it did not help.</p>
  <p>I also removed the expired certificate as described <a href="https://stackoverflow.com/questions/69387175/git-for-windows-ssl-certificate-problem-certificate-has-expired">here</a>, but still get the same error message.</p>
  <p>I work on mac (Catalina 10.15.7) and now I'm thinking about somehow updateing the openssl on my machine. openssl version tells me that I have LibreSSL 2.8.3 on my machine.</p>
  <p>Am I on the right track? Should I update LibreSSL to the latest version to solve this problem? How do I do that? Are there any side-effects? Is there a better solution to solve this problem?</p>
  <p>Thanks for any advice,
  W.</p>