Bug #75565 [Opn->Nab]: Certificate verification fails
Edit report at https://bugs.php.net/bug.php?id=75565&edit=1
ID: 75565
Updated by: ab@php.net
Reported by: nkiwga at gmail dot com
Summary: Certificate verification fails
-Status: Open
+Status: Not a bug
Type: Bug
Package: OpenSSL related
Operating System: Windows
PHP Version: 7.1.11
Block user comment: N
Private report: N
New Comment:
Thanks for the report. There's not much can be done on the PHP side. The certificate store is
updated automatically from some central place, that's why fe. also self signed certs sometimes
got deleted besides they're imported manually. I've checked on several machines and some
of them reproduced this, some didn't. So in the end it looks like there's still some
propagation phase for what ever reason the certificates have changed, etc.
Thanks.
Previous Comments:
------------------------------------------------------------------------
[2017-11-23 20:35:16] nkiwga at gmail dot com
I should add, this is using PHP 7.1.11 (cli).
------------------------------------------------------------------------
[2017-11-23 20:27:02] nkiwga at gmail dot com
Description:
------------
Certificate verification is failing for me now, on Windows 10 version 1709.
As I understand it PHP should automatically use the operating system's root certificates, and
it used to do so, however now it is failing.
I can mitigate the issue by specifying openssl.cafile in php.ini with a certificate bundle I found
on the internet, but this never used to be necessary.
Test script:
---------------
file_get_contents('https://www.google.com/');
Actual result:
--------------
PHP Warning: file_get_contents(): SSL operation failed with code 1. OpenSSL Error messages:
error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed in Command line
code on line 1
Warning: file_get_contents(): SSL operation failed with code 1. OpenSSL Error messages:
error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed in Command line
code on line 1
PHP Warning: file_get_contents(): Failed to enable crypto in Command line code on line 1
Warning: file_get_contents(): Failed to enable crypto in Command line code on line 1
PHP Warning: file_get_contents(https://www.google.com/): failed to open stream: operation failed in
Command line code on line 1
Warning: file_get_contents(https://www.google.com/): failed to open stream: operation failed in
Command line code on line 1
------------------------------------------------------------------------
--
Edit this bug report at https://bugs.php.net/bug.php?id=75565&edit=1
Thread (5 messages)