Getting a Curl error when trying to update plugins in Local

Hi everyone,

I had the same issue on all Local sites and found a solution from Wordpress Core Trac:
https://core.trac.wordpress.org/ticket/54207

Apparently, Wordpress’ certificate bundle contains an expired certificate (“DST Root CA X3” - expired on 30.09.2021).

Hotfix:
Just in case, make a backup of the file /wp-includes/certificates/ca-bundle.crt. In order to fix the curl error, you can now safely remove the “DST Root CA X3” certificate block from the cert file. Save the file and the curl error should disappear.

Important Note: This is NOT update-proof and will be overwritten if you update / reinstall Wordpress. Hopefully, this fix will be in WordPress 5.8.2, as proposed by the trac ticket.

Suggestion for the Local Team:
Provide an update to a recent, actively supported version of OpenSSL, or switch to the “better” alternative LibreSSL, if possible, to provide better long-term stability.

I hope this helps!

Thanks,
Henning

3 Likes