I did some odd stuff but it’s working now.
I ran openssl s_client -host discourse.server.com -port 443 -CApath /etc/ssl/certs and it errored out
depth=0 OU = Domain Control Validated, OU = PositiveSSL Wildcard, CN = *.domain.com
verify error:num=20:unable to get local issuer certificate
verify return:1
depth=0 OU = Domain Control Validated, OU = PositiveSSL Wildcard, CN = *.domain.com
verify error:num=27:certificate not trusted
verify return:1
depth=0 OU = Domain Control Validated, OU = PositiveSSL Wildcard, CN = *.domain.com
verify error:num=21:unable to verify the first certificate
verify return:1
---
Certificate chain
0 s:/OU=Domain Control Validated/OU=PositiveSSL Wildcard/CN=*.domain.com
i:/C=GB/ST=Greater Manchester/L=Salford/O=COMODO CA Limited/CN=COMODO RSA Domain Validation Secure Server CA
---
The cert chain got me thinking…
I googled Greater Manchester/L=Salford/O=COMODO CA Limited/CN=COMODO RSA Domain Validation Secure Server CA and the first link was:
I downloaded that CA to /etc/ssl/certs on the wordpress server and everything came to life. curl works, WP-Discourse is connected, yadda yadda yadda.
Still need to test some more and make sure it’s all working but I was able to post to discourse from WP on a test post.