# Client request error: unable to get local issuer certificate
**URL:** https://discuss.elastic.co/t/client-request-error-unable-to-get-local-issuer-certificate/46661
**Category:** Kibana
**Created:** [April 7, 2016, 10:30am UTC](https://discuss.elastic.co/t/client-request-error-unable-to-get-local-issuer-certificate/46661 "2016-04-07T10:30:42Z")
**Posts on this page:** 4
**Page:** 1
### Author:  [@DK\_3](https://discuss.elastic.co/u/DK_3)
#### Post date: [April 7, 2016, 10:30am UTC](https://discuss.elastic.co/t/client-request-error-unable-to-get-local-issuer-certificate/46661/1 "2016-04-07T10:30:42Z")
When installing Marvel I hit this issue:
```
/opt/kibana/bin/kibana plugin --install elasticsearch/marvel/latest
Installing marvel
Attempting to transfer from https://download.elastic.co/elasticsearch/marvel/marvel-latest.tar.gz
Error: Client request error: unable to get local issuer certificate
Plugin installation was unsuccessful due to error "Client request error: unable to get local issuer certificate"
```
My company uses an intermediate CA cert to verify https connections.
Where can I add this CA cert so that I can install Marvel??
Note: for the Elasticsearch plugin install tool I needed to import the cert with the `${JAVA_HOME}/bin/keytool`
For Kibana plugin install tool I've tried all the below config settings with no success (where /ca.pem is my CA cert in PEM format)
```
cat /opt/kibana/config/kibana.yml | grep ssl
server.ssl.cert: /ca.pem
# server.ssl.key: /path/to/your/server.key
elasticsearch.ssl.cert: /ca.pem
# elasticsearch.ssl.key: /path/to/your/client.key
elasticsearch.ssl.ca: /ca.pem
elasticsearch.ssl.verify: false
```
---
### Author:  [@Xeteskian](https://discuss.elastic.co/u/Xeteskian)
#### Post date: [September 9, 2016, 11:11am UTC](https://discuss.elastic.co/t/client-request-error-unable-to-get-local-issuer-certificate/46661/2 "2016-09-09T11:11:12Z")
Did you ever figure out how to get around this? I'm getting the same issue when I try to install elastic/timelion
---
### Author:  [@lagrianitis](https://discuss.elastic.co/u/lagrianitis)
#### Post date: [March 14, 2017, 11:22am UTC](https://discuss.elastic.co/t/client-request-error-unable-to-get-local-issuer-certificate/46661/3 "2017-03-14T11:22:55Z")
Try passing the NODE\_TLS\_REJECT\_UNAUTHORIZED=0 variable (tested up to v5.2).
Run the command like this:
> sudo -u \ NODE\_TLS\_REJECT\_UNAUTHORIZED=0 /opt/kibana/bin/kibana plugin --install elasticsearch/marvel/latest
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [July 6, 2017, 1:32pm UTC](https://discuss.elastic.co/t/client-request-error-unable-to-get-local-issuer-certificate/46661/4 "2017-07-06T13:32:44Z")