SSL Error: UNABLE_TO_VERIFY_LEAF_SIGNATURE - php

I uploaded my website build with laravel on ubuntu server and used Instamojo to accept payments. I have purchased SSL from Namecheap (PositiveSSL).
The problem is my webhook URL is not working. I tried accessing the URL through Postman and got an error 'Could not get any response'. The screenshot of Postman Console-

This can be caused by failing to bundle the intermediate certificates with the server certificate. You will have at least one intermediate certificate that needs to be bundled with you server cert.
For more information please read the Complete Tutorial for installing SSL on Apache

Related

cURL error 60: SSL certificate problem: unable to get local issuer certificate in WordPress installed on Ubuntu Server

I have an Ubuntu server on which I have installed WordPress. I'm using cloudflare Full(strict) End-to-End Encryption SSL and everything is working fine. I'm using a wordpress plugin Smush pro for image optimization but when I'm trying to configure it for Local WebP it is throwing me this error
cURL error 60: SSL certificate problem: unable to get local issuer
certificate
Can any one explain me what may be the potential issue and how can I resolve it?
I've searched on Google and found some answers on askubuntu and other platform, but nothing is working for me due to the lack of guidance.
I'm expecting a step by step guide to resolve this issue. Thanks

LDAP configuration with PHP + IIS

I am working on some 3rd party integration project.
Created RootCA and SubCA from their official documentation website and after importing in windows server, we created key using openssl and got signed certificate from 3rd party integration Support team
We have configured in ldp.exe client and it got connected and fetched the dataset.
Now we are implementing in PHP code level.
We have:
IIS server 10
PHP 7.2
PHP Code is working in IIS
Added ldap.conf file created c:/openldap/sysconf/ldap.conf
TLS_REQCERT allow
#TLS_CACERT c:\openldap\sysconf\RootCaSha1.der
TLS_CACERT c:\openldap\sysconf\SubCaSha1.der
#TLS_CACERTDIR c:\openldap\sysconf
We have tried various paths and noted all evidence via wireshark tool
It says TLSv1.2 Alert (Level: Fatal, Description: Handshake Failure) so it means some certificate in ldap.conf are not as per requirement.
Looking forward to help in this regard so we can get connect.
Thanks in advance
As far as I know, the TLS handshake failure error commonly occurred when the server’s certificate is configured improperly. this should be configured on the IIS server-side. Please check the below items.
The account running the website is supposed to own the right of accessing the private key of the certificate. Firstly import the certificate to the Local machine Certification Store, under the property page of the certificate, grant the account access to the private key of the certificate.
Subsequently, we specify the certificate in the IIS site binding module.
Besides, Please note that the communication between the client-side and the server-side is established based on the fact that the client trusts the server certificate. this means that when we visit the website, the browser address bar has the sign of security lock. In this way, the public key of the certificate can be exchanged. The specific operation is to add the server root certificate to the Trusted Root Certificate Authority certification store of the client-side.

PHP - Stripe Webhook is giving a TLS Error

I am trying to set up webhooks for Stripe. The webhook connects to https://authdomain.subd.com which then forwards the request (after adding a validation token) to http://www.workdomain.com
Both these urls are hosted on the same server.
Payment Intents generated from http://www.workdomain.com successfully go into Stripe.
(Update: I can also query run successful Stripe commands like \Stripe\Charge::all() from authdomain, which verifies that TLS 1.2 supported)
However the webhook returns a TLS error when trying to connect to https://authdomain.subd.com.
I have whitelisted Stripe's IP as listed here enter link description here
This process is working fine when I test it locally using a CLI, so I know I don't have to install Stripe on my auth layer project.
But for some reason when I try this on my live server it doesn't work on my live server.
Is there any reason this is happening?
Thanks for the help
This can be caused by any number of things, but the most common is an incomplete certificate chain. I'd recommend using Qualys' SSL Labs tool to check your server's TLS configuration. For example, to check the domain you shared:
https://www.ssllabs.com/ssltest/analyze.html?d=https://authdomain.subd.com&hideResults=on
If any of the intermediate chain certificates are marked as "missing" in this report, it can cause Stripe to refuse to connect to your webhook (as Stripe can't tie your TLS certificate back to a known global CA). Usually the fix is to download any missing certificates (the tool tells you which one) and add them to your production TLS configuration / bundle. You may need the help of your hosting company to configure this.
To test your repair, re-run the SSL Labs check after deploying the new certificate bundle and see if it's now resolved. Beyond that, if the problems persist I'd recommend writing Stripe support!

eWay Responsive Shared Page integration in PHP by Using CURL

I am trying to integrate eWay payment gateway (Responsive Shared Page) by using Curl(json) in php.it is working fine in my virtual machine that is ubuntu12.0
but curl not getting any response if i exceute same code on xampp server.
What is problem with curl?
Thanks in advance.
While it would be helpful if you could at least provide the error you are getting (details for finding the error log are here), most XAMPP issues are because it either doesn't have openssl enabled or it isn't loading the CA bundle to verify SSLs with. The solutions can be found in the following:
Enable OpenSSL with XAMPP
Adding the CA bundle to XAMPP

HWIOAuthBundle - SSL certificate on Windows

I am developing an application with Symfony 2 on a local server running Windows but finding a problem with Curl, namely:
SSL certificate problem: unable to get local issuer certificate
Would seem to be a common problem for this OS but there is a definitive solution to solve it?
Bearing in mind that deploy the application will be done on a server installed with Linux.
Disabling peer verification is not a good solution.
PHP's curl extension can load a list of verified certificate authorities.
Download http://curl.haxx.se/ca/cacert.pem from the writer of curl and add this to your php.ini
curl.cainfo="c:\php\cacert.pem"

Categories