Announcing a Change to the Certificate for the NGINX Plus Repository In our ongoing efforts to improve the security of our products, we’ve made a change that affects the way NGINX Plus is installed and updated. We are replacing the self-signed certificate we previously used to secure the NGINX Plus repository with a certificate from GlobalSign, a well-known and trusted Certificate Authority (CA). With a CA-signed certificate, clients can now verify the certificate we present and be assured that the code they are downloading is from NGINX. The next time you install or update NGINX Plus, you might see an error such as: On Amazon Linux, CentOS, Oracle Linux, and RHEL: curl#60 – “Peer’s certificate issuer has been marked as not trusted by the user.” On Debian and Ubuntu: server certificate verification failed. CAfile: /etc/ssl/nginx/CA.crt CRLfile: none If you get [ more… ]