Unable to get local issuer certificate error

We have been using postman runner for a while now but have started receiving the error “unable to get local issuer certificate” Does anyone know what this means and how to resolve. My team are not developers and self taught with Postman and API’s so forgive our ignorance :grinning:

try turning off “SSL certificate verification” under File->Settings

I’m getting this error on latest versions of Postman like on win64-7.28.0, win64-7.29.1.
Error has gone when I degraded it to win64-7.13.0.

“SSL certificate verification” is On under settings.

Let me know if it also works for you :slight_smile:

I was on version 8.0.3 and got the same error message as @amymcclatchy. I’d really rather keep SSL certificate verification ON to catch issues with expired certificates. I have tried using the version mentioned by @rich.browserstack that I downloaded from https://dl.pstmn.io/download/version/7.13.0/win64, but I still get the same error message.

What “local issuer certificate” is Postman trying to get?

This is a simple GET request, and Chrome does not seem to think there’s anything wrong with the certificate…

Hi @security-explorer-42,

Welcome to the community! :clap:

The issue is likely that there is no trust established with the certificate from the endpoint you are hitting, and your client, or Postman.

Doing some googling, it looks like this issue could be related to the server endpoint, and not Postman, where TLS is not properly set up. Are you experiencing this issue with other clients? What does Chrome actually show you? Are the developers of the endpoint aware of this issue? Maybe try a curl request to see if the same issue arises.

You’ll likely have to do a bit more troubleshooting to really see where the error is, but for now, this is your best start.

@odanylewycz using curl helped us determine that there were no errors with the endpoint itself. It turned out that we needed get a bundle of our company’s internal CA root and intermediate certificates. We specified the bundle in Postman (Settings >> Certificates >> CA Certificates), then we could turn ON the Settings >> General >> SSL certificate verification and no longer received either of the errors (“unable to get local issuer certificate” or “unable to verify the first certificate”).

1 Like

Hi @security-explorer-42,

Great to hear, sounds like good troubleshooting to me.

My second option was about importing the proper CA certs (including intermediaries), into Postman and then trying it out, however I have usually seen slightly different errors. Maybe it was because intermediary certs were needed here.

Anyway, thanks for sharing your solution with the community!

I have SSL Certification Verification switched off and I’m still getting this error message.

If the issue persists, you can disable SSL certificate verification by going to Settings (the gear icon) > General tab > turn off “SSL certificate verification”. Additionally, make sure the server’s certificate chain is complete, and install any missing root or intermediate certificates on your system. If you’re using a self-signed certificate, you can add the CA certificate under Settings > Certificates in Postman. Further, you can read https://cheapsslweb.com/blog/fixing-unable-to-get-issuer-cert-locally-error/ or you can find on github also to get resolve.

The “unable to get local issuer certificate” error in Postman typically occurs when the client (Postman) cannot verify the SSL certificate chain from the server. This often happens because Postman is missing the root certificate required to validate the chain.

To resolve this, you can disable SSL certificate verification in Postman under Settings > General, or you can install the missing certificates locally. You can learn more about fixing this error at - How to Fix Unable to Get Local Issuer Certificate Error (found from Google).

For anyone who had SSL Verification Off, also make sure it’s off in the request itself under “settings,” not just in File → Settings. This was my issue.