How to fix "No client certificate CA names sent" ubuntu?

Question

ubuntu

I built the root certificates in the /etc/ssl/certs folder and sees them when requested, for example, on google, all certificates are visible, but when I get to the CA certificate, an error will appear, I configured it, connected it according to this article and as a result it still gives errors:

No client certificate CA names sent

SSL handshake has read 6660 bytes and written 392 bytes
Verification error: unable to get local issuer certificate

Tell me what could be the reason?

Answer 1

Needed to integrate with esia.
Fixed it myself:
1. Installed the package on ubuntu: sudo apt-get install ca-certificates, entered the command: dpkg-reconfigure ca-certificatesand unchecked all unnecessary certificates.
2. I took all the necessary certificates: from the server, the esia Information System, the Ministry of Communications of Russia and Sectigo
3. They were loaded in .cer format, converted to .crt using the openssl command

openssl x509 -inform der -in name_certificate.cer -out name_certificate.crt

4. Put on the way on the server /usr/local/share/ca-certificates, NECESSARILY IN .crt FORMAT!!!!
5. Entered the command sudo update-ca-certificates
6. Then entered the command sudo c_rehash
After that, authorization with esia worked