On a webstore a partner is running, he is trying to import items from my IIS service. While everything was working fine after we reloaded the ssl certification because it was about to expire, he started having issue with importing the items, specifically the issue is with importing the images.
The command the application is running is curl -vl and he gets these errors :
• Error code: 2
• Error file: model/extension/module/ie_pro.php
• Error line: 958
• Error message: copy(): SSL operation failed with code 1. OpenSSL Error messages: error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed
AND output from the curl comand
curl -vI https://files.domain.gr/image/12345.jpg
* Trying 192.168.1.5...
* TCP_NODELAY set
* Connected to files.domain.gr (192.168.1.5) port 443 (#0)
* ALPN, offering h2
* ALPN, offering http/1.1
* successfully set certificate verify locations:
* CAfile: /etc/pki/tls/certs/ca-bundle.crt
CApath: none
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
* TLSv1.3 (IN), TLS handshake, Server hello (2):
* TLSv1.2 (IN), TLS handshake, Certificate (11):
* TLSv1.2 (OUT), TLS alert, unknown CA (560):
* SSL certificate problem: unable to get local issuer certificate
* Closing connection 0
curl: (60) SSL certificate problem: unable to get local issuer certificate
More details here: https://curl.haxx.se/docs/sslcerts.html
curl failed to verify the legitimacy of the server and therefore could not
establish a secure connection to it. To learn more about this situation and
how to fix it, please visit the web page mentioned above
I tried reinstalling the certificate but the issue persists, is there anything more I can do?
Your could check your SSL certificate is valid by putting your URL in an online checker.
This should also say which root certificate is needed to validate it. You can then check the CAfile: /etc/pki/tls/certs/ca-bundle.crt contains that root certificate.
This should also say which root certificate is needed to validate it. You can then check the CAfile: /etc/pki/tls/certs/ca-bundle.crt contains that root certificate.
Try a different type of certificate? Or update OpenSSL on the server?
UK OpenCart Hosting | OpenCart Audits | OpenCart Support - please email info@antropy.co.uk
Who is online
Users browsing this forum: No registered users and 26 guests