Azure IoT Gateway (Edge) Verification error: unable to get local issuer certificate

I followed all instructions on https://docs.microsoft.com/en-us/azure/iot-edge/how-to-create-transparent-gateway?view=iotedge-2018-06 to get up a IoT Edge device.

Summary of things I did:

git clone https://github.com/Azure/iotedge.git  cp <path>/iotedge/tools/CACertificates/*.cnf .  cp <path>/iotedge/tools/CACertificates/certGen.sh .  ./certGen.sh create_root_and_intermediate  ./certGen.sh create_edge_device_identity_certificate "<name>"  ./certGen.sh create_edge_device_ca_certificate "<CA cert name>"  

Edited /etc/iotedge/config.yaml

certificates:    device_ca_cert: "/home/pi/certificates/certs/iot-edge-device-ca-edge-device-full-chain.cert.pem"    device_ca_pk: "/home/pi/certificates/private/iot-edge-device-ca-edge-device.cert.pem"    trusted_ca_certs: "/home/pi/certificates/certs/azure-iot-test-only.root.ca.cert.pem"  

Deleted content of folders /var/lib/iotedge/hsm/certs and /var/lib/iotedge/hsm/cert_keys

Restarted IoT edge:

sudo systemctl restart iotedg  

Tested with:

openssl s_client -connect mygateway.contoso.com:8883 -CAfile <CERTDIR>/certs/azure-iot-test-only.root.ca.cert.pem -showcerts  

Receiving the error:

I did every step mentioned in the documentation. What am I doing wrong?

https://stackoverflow.com/questions/66661465/azure-iot-gateway-edge-verification-error-unable-to-get-local-issuer-certific March 17, 2021 at 02:42AM