Since yesterday I'm unable to receive paypal ipn notifications. I've check the log file and the error is:
[24-Mar-2015 13:48:44] cURL error: [60] SSL certificate problem, verify that the CA cert is OK. Details:
error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed
Any thoughts ?
It seems the certificate wasn't valid anymore.
I followed the code comments on the paypal ipn listener sample and downloaded a new certificate from http://curl.haxx.se/docs/caextract.html (HTTPS from github: ca-bundle.crt) and replaced the old one. Problem solved.
I hope it helps others.
I've fixed it by updating root certificates in Ubuntu by running sudo update-ca-certificates
Related
I have an instance of a php site that requires a script running behind an https link on the intranet for my company. The https link is using a self-signed cert. I have tried updating the cacert.pem to allow it but I still get the following:
Warning: require(): SSL operation failed with code 1. OpenSSL Error messages: error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed
If I were using cURL I would just bypass the ssl on this request but with require I cannot.
Any ideas?
I tried to install Composer on a fresh newly installed Windows 10 Pro build 1809 and I got this error message.
The Composer installer script was not successful [exit code 1].
OpenSSL failed with a 'certificate verify failed' error. This
indicates a problem with the Certificate Authority file(s) on your
system, which may be out of date.
Certificate location [from openssl.cafile ini setting]:
D:\xampp\apache\bin\curl-ca-bundle.crt
The php.ini used by your command-line PHP is: D:\xampp\php\php.ini
Script Output:
The "https://getcomposer.org/versions" file could not be downloaded: SSL operation failed with code 1. OpenSSL Error messages:
error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed
Failed to enable crypto
failed to open stream: operation failed
I've tried to replace the "curl-ca-bundle.crt" with "cacert.pem" from http://curl.haxx.se/ca/cacert or with "ca-bundle.crt" but it's nothing, the error messages still happened.
Can anyone help me to fix this problem?
Finally, I solved this problem. Because my company's blocked something on the network. Then I try to switched to the other network, then It's succuessfully installed!
While attempting to clean up our project dependencies, composer is failing with the errors:
The "https://packagist.drupal-composer.org/packages.json" file could not be downloaded: SSL operation failed with code 1. OpenSSL Error messages:
error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed
Failed to enable crypto
failed to open stream: operation failed
https://packagist.drupal-composer.org could not be fully loaded, package information was loaded from the local cache and may be out of date
This is happening on a vagrant CentOS 7 box.
I found one answer that recommended to download the Mozilla CA certificate store and ensuring that openssl.cafile is set in php.ini but that didn't work for me.
I ran wget -v https://packagist.drupal-composer.org/packages.json to see what it returned from both my local machine (it worked correctly) and the vagrant box. The output on the vagrant box was:
--2016-04-24 09:08:30-- https://packagist.drupal-composer.org/packages.json
Resolving packagist.drupal-composer.org... 147.75.205.69
Connecting to packagist.drupal-composer.org|147.75.205.69|:443... connected.
ERROR: cannot verify packagist.drupal-composer.org's certificate, issued by "/C=US/O=Let's Encrypt/CN=Let's Encrypt Authority X3":
Issued certificate not yet valid.
To connect to packagist.drupal-composer.org insecurely, use '--no-check-certificate'.
It seemed strange to me that the certificate was coming back as not yet valid, until I realized that the date in the output was off by 2 days (today is 04-26, not 04-24). After fixing the system clock I retried and was able to download all the dependencies.
I'm receiving the following error, which I cannot seem to figure out how to fix on my localhost (WampServer).
PHP is version 5.4.3 and Apache 2.2.22
An email sending error occurred: Mandrill_HttpError - API call to
messages/send-template failed: SSL certificate problem, verify that the CA
cert is OK. Details: error:14090086:SSL
routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed
I've added the line to both php.ini files and phpForApache.ini, to no avail.
[curl]
curl.cainfo = "c:\wamp\cacert.pem"
Have also tried various combinations of this, but no luck. Perhaps I need a different cacert.pem? I'm using http://curl.haxx.se/ca/cacert.pem
When did you install your WAMP? If it was a while ago then your certificate expired. They are issued for 1 year period I think. You might consider updating your WAMP (it will come with a new certificate) or generating new certificate on your own.
In any case, as the error message states there is something with the certificate not that it is not recognized by CA. When it is not recognized by CA you would want update php.ini and perhaps download a new PEM file.
When i try to install MyCloud (.org) on my providers server it says the following:
Warning: rename(tmp-owncloud1379778454/owncloud,./owncloud): The system cannot find the file specified. (code: 2) in E:\HostingSpaces\Rekum\cloud.jailbreaking.nl\wwwroot\setup-owncloud.php on line 108
ownCloud
Error
ownCloud is NOT installed
download of ownCloud source file failed.
SSL certificate problem, verify that the CA cert is OK. Details: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failedSSL certificate problem, verify that the CA cert is OK. Details: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed
Can anyone help me solve this? I know its a Windows server, but I do not have the privilege to send commands or something. Basically I only have FTP access and database access.
If you want to try to install, you can check the install over here:
My Website
Thank you!
Joost
Please download the .zip version from owncloud.org. Unpack it manually locally and upload the complete folder with ftp. This should work