Skip to content

Unable to login and receiving the following error "unable to get local issuer certificate"

Athira Sabu edited this page Dec 28, 2022 · 1 revision
  • Ensure you have the latest version of the Twilio CLI installed. You can upgrade your Twilio CLI installation by following the steps.
  • Ask your company's Information Technology department to provide you with the CA certificates that are being used and store them in a directory on your hard drive.
  • Set the environment variable TWILIO_CA_BUNDLE to the path of the .pem or .ca-bundle file that you saved earlier.
  • If the above steps do not work, we recommend that you work with your company's Information Technology department to add "*.twilio.com" domains to their "allow-list" so that TLS traffic to Twilio will not be proxied.   If you are unable to login after following the above steps   
  • Configure Node to use a custom CA bundle extractor in addition to whatever you might have from your OS or IT department. This can be done by setting the environment variable like export NODE_EXTRA_CA_CERTS=path/to/your/pem/file

Why ?

NodeJS uses its own store of SSL certificates. That means updating the version of NodeJS used is often all that is needed to resolve issues with SSL. However, sometimes Companies restrict environments where they proxy all outbound traffic and install their own SSL certificate on each machine which is used by the web browser. This allows the Companies to deeply inspect all of the traffic since they are able to decrypt traffic from the machine to their server, then re-encrypt before handing it off to Twilio.