# Server Certificate Verification Failed **URL:** \ **Category:** Developers\ **Created:** [23 February 2018 01:55 UTC](https://forum.cardano.org/t/server-certificate-verification-failed/8591 "2018-02-23T01:55:48Z")\ **Posts on this page:** 12\ **Page:** 1
**Author:** ![Shunfan](https://sea1.discourse-cdn.com/flex023/user_avatar/forum.cardano.org/shunfan/32/9708_2.png) [@Shunfan](https://forum.cardano.org/u/Shunfan)\ **Post date:** [23 February 2018 01:55 UTC](https://forum.cardano.org/t/server-certificate-verification-failed/8591/1 "2018-02-23T01:55:49Z")
I followed these instructions to run a Cardano node successfully: - [https://github.com/input-output-hk/cardano-sl/blob/develop/docs/how-to/build-cardano-sl-and-daedalus-from-source-code.md](https://github.com/input-output-hk/cardano-sl/blob/develop/docs/how-to/build-cardano-sl-and-daedalus-from-source-code.md) (I used Nix build mode only) - [https://github.com/input-output-hk/cardano-sl/blob/develop/docs/how-to/connect-to-cluster.md](https://github.com/input-output-hk/cardano-sl/blob/develop/docs/how-to/connect-to-cluster.md) (I used `./connect-to-mainnet` to run the node) The wallet API works fine with SSL disabled: ```bash $ curl -k https://localhost:8090/api/settings/sync/progress {"Right":{"_spLocalCD":{"getChainDifficulty":{"getBlockCount":657293}},"_spNetworkCD":{"getChainDifficulty":{"getBlockCount":657293}},"_spPeers":0}} ``` However, I could not access the API using any certificate: (`shunfan` is my username) ```nohighlight $ curl --cacert /home/shunfan/cardano-sl/scripts/tls-files/ca.crt https://localhost:8090/api/settings/sync/progress curl: (60) server certificate verification failed. CAfile: /home/shunfan/cardano-sl/scripts/tls-files/ca.crt CRLfile: none More details here: http://curl.haxx.se/docs/sslcerts.html curl performs SSL certificate verification by default, using a "bundle" of Certificate Authority (CA) public keys (CA certs). If the default bundle file isn't adequate, you can specify an alternate file using the --cacert option. If this HTTPS server uses a certificate signed by a CA represented in the bundle, the certificate verification probably failed due to a problem with the certificate (it might be expired, or the name might not match the domain name in the URL). If you'd like to turn off curl's verification of the certificate, use the -k (or --insecure) option. ``` `/home/shunfan/cardano-sl/scripts/tls-files/ca.crt` does exist and I tried `/home/shunfan/cardano-sl/state-wallet-mainnet/tls/server.cert` as well. However, both of them throw the same error. ---
**Author:** ![p-alik](https://sea1.discourse-cdn.com/flex023/user_avatar/forum.cardano.org/p-alik/32/1578_2.png) [@p-alik](https://forum.cardano.org/u/p-alik)\ **Post date:** [23 February 2018 06:47 UTC](https://forum.cardano.org/t/server-certificate-verification-failed/8591/2 "2018-02-23T06:47:50Z")
No issue to me. ``` cardano-sl]$ git describe v1.0.3-2378-g0ceca33c2 cardano-sl]$ curl -H "Content-Type: application/json" --cacert scripts/tls-files/ca.crt https://localhost:8090/api/info {"Right":{"cabalVersion":"1.0.3","apiVersion":"v0","gitRevision":"0ceca33c290f07ecdbb6ee8789dcdeef8e2d8d93","softwareVersion":"cardano-sl:0"}} ``` ---
**Author:** ![Shunfan](https://sea1.discourse-cdn.com/flex023/user_avatar/forum.cardano.org/shunfan/32/9708_2.png) [@Shunfan](https://forum.cardano.org/u/Shunfan)\ **Post date:** [23 February 2018 16:53 UTC](https://forum.cardano.org/t/server-certificate-verification-failed/8591/3 "2018-02-23T16:53:05Z")
I still could not find a solution, but I will use `-k` to turn off the verification for now. ```bash $ git describe v1.0.3-92-g520d315 ``` ---
**Author:** ![dtyagi](https://avatars.discourse-cdn.com/v4/letter/d/45deac/32.png) [@dtyagi](https://forum.cardano.org/u/dtyagi)\ **Post date:** [23 February 2018 23:00 UTC](https://forum.cardano.org/t/server-certificate-verification-failed/8591/4 "2018-02-23T23:00:18Z")
@shufan i am facing the same issue, but will figure it out soon, maybe we are missing some files ---
**Author:** ![nsticco](https://sea1.discourse-cdn.com/flex023/user_avatar/forum.cardano.org/nsticco/32/2261_2.png) [@nsticco](https://forum.cardano.org/u/nsticco)\ **Post date:** [24 February 2018 03:14 UTC](https://forum.cardano.org/t/server-certificate-verification-failed/8591/5 "2018-02-24T03:14:12Z")
Have you tried specifying your actual IP in the connect-to-mainnet script instead of using localhost? You’ll have to adjust it in a few places. ---
**Author:** ![lhfly5201314](https://sea1.discourse-cdn.com/flex023/user_avatar/forum.cardano.org/lhfly5201314/32/4291_2.png) [@lhfly5201314](https://forum.cardano.org/u/lhfly5201314)\ **Post date:** [27 April 2018 08:57 UTC](https://forum.cardano.org/t/server-certificate-verification-failed/8591/6 "2018-04-27T08:57:31Z")
Hi,I am a guy from China and I am a newbie for the Cardano. I run the Cardano node withe the some intructions as the above and met the same issue with you! I tried to add the -k in my curl command,but it only works for some get request,just like: curl -k [https://localhost:8090/api/settings/sync/progress](https://localhost:8090/api/settings/sync/progress) or /api/info… when I try the post command to create a new wallet,the command is in the below link: curl -k -X POST [https://localhost:8090/api/v1/wallets](https://localhost:8090/api/v1/wallets) -H “Content-Type: application/json; charset=utf-8” -H “Accept: application/json; charset=utf-8” \ -d ‘{ “operation”: “create”, “backupPhrase”: [“squirrel”, “material”, “silly”, “twice”, “direct”, “slush”, “pistol”, “razor”, “become”, “junk”, “kingdom”, “flee”], “assuranceLevel”: “normal”, “name”: “MyFirstWallet” }’ unfortunately,the command return nothing! I wanna know whether you solve the issue and Could u create the new wallet with the post command? Thanks!Looking forward to your reply! ---
**Author:** ![Shunfan](https://sea1.discourse-cdn.com/flex023/user_avatar/forum.cardano.org/shunfan/32/9708_2.png) [@Shunfan](https://forum.cardano.org/u/Shunfan)\ **Post date:** [27 April 2018 15:24 UTC](https://forum.cardano.org/t/server-certificate-verification-failed/8591/7 "2018-04-27T15:24:37Z")
I have the same problem with API v1. Here is a related issue: [https://github.com/input-output-hk/cardano-sl/issues/2719](https://github.com/input-output-hk/cardano-sl/issues/2719) (I saw your comments on that issue) API v0 documentation: [https://cardanodocs.com/technical/wallet/api/v0/](https://cardanodocs.com/technical/wallet/api/v0/) API v1 documentation: [https://cardanodocs.com/technical/wallet/api/v1/](https://cardanodocs.com/technical/wallet/api/v1/) ---
**Author:** ![lhfly5201314](https://sea1.discourse-cdn.com/flex023/user_avatar/forum.cardano.org/lhfly5201314/32/4291_2.png) [@lhfly5201314](https://forum.cardano.org/u/lhfly5201314)\ **Post date:** [27 April 2018 23:26 UTC](https://forum.cardano.org/t/server-certificate-verification-failed/8591/8 "2018-04-27T23:26:56Z")
Really appreciate your reply and patience! Have a nice day!😀😀 ---
**Author:** ![lhfly5201314](https://sea1.discourse-cdn.com/flex023/user_avatar/forum.cardano.org/lhfly5201314/32/4291_2.png) [@lhfly5201314](https://forum.cardano.org/u/lhfly5201314)\ **Post date:** [30 April 2018 06:25 UTC](https://forum.cardano.org/t/server-certificate-verification-failed/8591/9 "2018-04-30T06:25:14Z")
@Shunfan Hi,friend! Could I have your several minutes?? I have created some new wallet and new accounts using the v0 api with curl command! But I failed finally when I tried to create some new addresses. The doc link is here:[https://cardanodocs.com/technical/wallet/api/v0/#tag/V0-(Deprecated)%2Fpaths%2F~1api~1addresses%2Fpost](https://cardanodocs.com/technical/wallet/api/v0/#tag/V0-(Deprecated)%2Fpaths%2F~1api~1addresses%2Fpost) I think the part about creating the new addresses is not very clear. I am really confused.I have tried the different curl command like below: curl -k -X POST [https://127.0.0.1:8090/api/addresses](https://127.0.0.1:8090/api/addresses) -H “Content-Type: application/json;charset=utf-8” -d ‘{“caId”:‘Ae2tdPwUPEZ18ZjTLnLVr9CEvUEUX4eW1LBHbxxxJgxdAYHrDeSCSbCxrvx@2329733709’}’ Neither worked!What’s wrong with the curl command?? Have you succeeded with the creating addresses with curl command?? Could u paste your curl command here? Thanks so much! ---
**Author:** ![lhfly5201314](https://sea1.discourse-cdn.com/flex023/user_avatar/forum.cardano.org/lhfly5201314/32/4291_2.png) [@lhfly5201314](https://forum.cardano.org/u/lhfly5201314)\ **Post date:** [30 April 2018 06:26 UTC](https://forum.cardano.org/t/server-certificate-verification-failed/8591/10 "2018-04-30T06:26:34Z")
The other curl commands I have tried： curl -k -X POST [https://127.0.0.1:8090/api/addresses](https://127.0.0.1:8090/api/addresses) -H “Content-Type: text/plain;charset=utf-8” -d “Ae2tdPwUPEZ18ZjTLnLVr9CEvUEUX4eW1LBHbxxxJgxdAYHrDeSCSbCxrvx@2329733709” curl -k -X POST [https://127.0.0.1:8090/api/addresses](https://127.0.0.1:8090/api/addresses) -H “Content-Type: application/json;charset=utf-8” -H “Accept: application/json; charset=utf-8” -d “CAccountId=Ae2tdPwUPEZ18ZjTLnLVr9CEvUEUX4eW1LBHbxxxJgxdAYHrDeSCSbCxrvx@2329733709” ---
**Author:** ![Shunfan](https://sea1.discourse-cdn.com/flex023/user_avatar/forum.cardano.org/shunfan/32/9708_2.png) [@Shunfan](https://forum.cardano.org/u/Shunfan)\ **Post date:** [30 April 2018 15:27 UTC](https://forum.cardano.org/t/server-certificate-verification-failed/8591/11 "2018-04-30T15:27:09Z")
Could you add `-v` flag (verbose mode) into your curl command and show me the response from the API? Does your wallet have a passphrase? ---
**Author:** ![lhfly5201314](https://sea1.discourse-cdn.com/flex023/user_avatar/forum.cardano.org/lhfly5201314/32/4291_2.png) [@lhfly5201314](https://forum.cardano.org/u/lhfly5201314)\ **Post date:** [1 May 2018 09:25 UTC](https://forum.cardano.org/t/server-certificate-verification-failed/8591/12 "2018-05-01T09:25:10Z")
## Hi,friend!When I created the wallet,I didn’t set the passphrase,only set the cwBackupPhrase. The verbose mode response is below: Note: Unnecessary use of -X or --request, POST is already inferred. - Trying 127.0.0.1… % Total % Received % Xferd Average Speed Time Time Time Current Dload Upload Total Spent Left Speed 0 0 0 0 0 0 0 0 --:–:-- --:–:-- --:–:-- 0\* Connected to 127.0.0.1 (127.0.0.1) port 8090 (#0) - found 148 certificates in /etc/ssl/certs/ca-certificates.crt - found 592 certificates in /etc/ssl/certs - ALPN, offering http/1.1 - SSL connection using TLS1.2 / ECDHE\_RSA\_AES\_256\_GCM\_SHA384 - server certificate verification SKIPPED - server certificate status verification SKIPPED - common name: localhost (does not match ‘127.0.0.1’) - server certificate expiration date OK - server certificate activation date OK - certificate public key: RSA - certificate version: #3 - subject: CN=localhost - start date: Fri, 27 Apr 2018 11:13:44 GMT - expire date: Mon, 24 Apr 2028 11:13:44 GMT - issuer: CN=localhost - compression: NULL - ALPN, server accepted to use http/1.1 > POST /api/addresses HTTP/1.1 > Host: 127.0.0.1:8090 > User-Agent: curl/7.47.0 > Accept: _/_ > Content-Type: application/json;charset=utf-8 > Content-Length: 79 } [79 bytes data] - upload completely sent off: 79 out of 79 bytes \< HTTP/1.1 400 Bad Request \< Transfer-Encoding: chunked \< Date: Tue, 01 May 2018 09:13:40 GMT \< Server: Warp/3.2.13 \< { [51 bytes data] 100 117 0 38 100 79 342 711 --:–:-- --:–:-- --:–:-- 718 - Connection #0 to host 127.0.0.1 left intact Failed reading: not a valid json value * * * Both commands(“caId”:…and “CAccountId”:…) return the same response. Maybe the last sentence is import: Failed reading:not a valid json value. But I really don’t know how to arrage the json value from the v0 api doc!