question [Cloudera][DriverSupport] (1100) SSL certificate verification failed because the certificate is missing or incorrect. (1100) (SQLDriverConnect); [HY000] [Cloudera][DriverSupport] (1100) SSL certificate verification failed because the certificate is missing or incorrect. (1100) in Support Questions

[Cloudera][DriverSupport] (1100) SSL certificate verification failed because the certificate is missing or incorrect. (1100) (SQLDriverConnect); [HY000] [Cloudera][DriverSupport] (1100) SSL certificate verification failed because the certificate is missing or incorrect. (1100)

WMichael — Tue, 21 Apr 2026 06:18:33 GMT

Recently started getting the following error when attempting and odbc connection using 2.06.09.1009 windows 64-bit odbc driver:

"[Cloudera][DriverSupport] (1100) SSL certificate verification failed because the certificate is missing or incorrect. (1100) (SQLDriverConnect); [HY000] [Cloudera][DriverSupport] (1100) SSL certificate verification failed because the certificate is missing or incorrect. (1100)"

Upon further investigation using openssl against the cacerts.pem file we discovered there are several components in the pem file that have expired.

Where can we get an update cacerts.pem file?

Thanks.

Re: [Cloudera][DriverSupport] (1100) SSL certificate verification failed because the certificate is missing or incorrect. (1100) (SQLDriverConnect); [HY000] [Cloudera][DriverSupport] (1100) SSL certificate verification failed because the certificate is missing or incorrect. (1100)

upadhyayk04 — Thu, 26 Jun 2025 06:57:13 GMT

Hello @WMichael

Thank you for reaching out to Cloudera Community

How to update cacerts.pem:

1. Locate the file:
Find where your cacerts.pem file is stored on your system. The location varies depending on your operating system, web server, or application (e.g., PHP, OpenSSL).
2. Obtain a new cacerts.pem:
You can either download a fresh cacerts.pem from a trusted source (like your operating system vendor or a reputable security provider) or copy from the working node or else generate one yourself third party reference.
3. Replace the old file:
Carefully replace the expired cacerts.pem file with the new one.
4. Configure your system:
If necessary, update your system's configuration to point to the new cacerts.pem file. For example, you might need to adjust the curl.cainfo setting in your php.ini file.
5. Restart services:
After updating the file and configuration, restart any relevant services (e.g., web server, PHP) to apply the changes.

Re: [Cloudera][DriverSupport] (1100) SSL certificate verification failed because the certificate is missing or incorrect. (1100) (SQLDriverConnect); [HY000] [Cloudera][DriverSupport] (1100) SSL certificate verification failed because the certificate is missing or incorrect. (1100)

WMichael — Thu, 26 Jun 2025 14:59:07 GMT

Thanks.

The installation of the ODBC driver installation included the cacerts.pem file. Is there a way to get an updated file (without reinstalling the ODBC Driver)?

Re: [Cloudera][DriverSupport] (1100) SSL certificate verification failed because the certificate is missing or incorrect. (1100) (SQLDriverConnect); [HY000] [Cloudera][DriverSupport] (1100) SSL certificate verification failed because the certificate is missing or incorrect. (1100)

upadhyayk04 — Fri, 27 Jun 2025 05:25:04 GMT

Thanks @WMichael

I am not sure about any other way but reinstalling the ODBC driver should fix the issue is certs are bundled with the driver only

Re: [Cloudera][DriverSupport] (1100) SSL certificate verification failed because the certificate is missing or incorrect. (1100) (SQLDriverConnect); [HY000] [Cloudera][DriverSupport] (1100) SSL certificate verification failed because the certificate is missing or incorrect. (1100)

WMichael — Tue, 01 Jul 2025 18:13:29 GMT

Turns out a change had been made on the Server that required a change in the way the ODBC connection was being made. After adding "UseSystemTrustStore=1" to our connection string, then out problem was solved.

Re: [Cloudera][DriverSupport] (1100) SSL certificate verification failed because the certificate is missing or incorrect. (1100) (SQLDriverConnect); [HY000] [Cloudera][DriverSupport] (1100) SSL certificate verification failed because the certificate is missing or incorrect. (1100)

dimi_yu — Wed, 23 Jul 2025 04:49:19 GMT

The error means the SSL certificates used by your Cloudera ODBC driver are outdated or expired. To fix it, download the latest cacerts.pem file from a trusted source like Curl's CA bundle or your company’s security team. Replace the old cacerts.pem file in the ODBC driver's configuration directory. Then restart your ODBC connection and test again.