After enabling SSL on a couple of apps, I got an email from one of my cron jobs telling me my SOAP API was no longer working. (This is why you always want to have an entry in /etc/aliases forwarding root’s email to an account you will read)
The error message was “unable to get local issuer certificate.” I thought, no big deal, there must be an easy way to get SOAP4R to find all the root CA certificates. Unfortunately it took a while searching Google to find the right answer, so I’m posting it here to make it easier for the next person (which just might be me next week).