TLS alert
TLS alert: unknown_ca
As text you can copy
unknown_ca - Kind
- Alert
- Where you meet it
- While a secure connection is being set up or used
What does unknown_ca mean in TLS?
A valid certificate chain or partial chain was received, but the certificate was not accepted because the CA certificate could not be located or could not be matched with a known trust anchor.
Risk warning: CFDs and spread bets are complex instruments and come with a high risk of losing money rapidly due to leverage. You can lose money on these products, and each provider publishes its own loss figure under FCA rules. You should consider whether you understand how they work and whether you can afford to take the high risk of losing your money. Automated and API trading can amplify losses through bugs, connectivity failures and runaway orders.
What it means in trading API work
The certificate chain leads to an authority your system does not trust. Usual causes are an out of date store of root certificates, a corporate proxy that signs traffic again with its own certificate, or a server that sends an incomplete chain.
This part is this site's own explanation, written for people learning to call a trading API. It is not part of the source cited above and it describes no particular broker.
What should I do about unknown_ca?
Update the root certificates of the operating system or the runtime. On a corporate network, ask how its proxy certificate is meant to be trusted. Do not disable verification.
This page is an independent explanation in plain words. The definition itself is in the source it was read from, which is the authority if the two ever differ.