Post by savvasv » Thu Jun 26, 2025 1:16 pm

On a webstore a partner is running, he is trying to import items from my IIS service. While everything was working fine after we reloaded the ssl certification because it was about to expire, he started having issue with importing the items, specifically the issue is with importing the images.
The command the application is running is curl -vl and he gets these errors :
• Error code: 2
• Error file: model/extension/module/ie_pro.php
• Error line: 958
• Error message: copy(): SSL operation failed with code 1. OpenSSL Error messages: error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed
AND output from the curl comand
curl -vI https://files.domain.gr/image/12345.jpg
* Trying 192.168.1.5...
* TCP_NODELAY set
* Connected to files.domain.gr (192.168.1.5) port 443 (#0)
* ALPN, offering h2
* ALPN, offering http/1.1
* successfully set certificate verify locations:
* CAfile: /etc/pki/tls/certs/ca-bundle.crt
CApath: none
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
* TLSv1.3 (IN), TLS handshake, Server hello (2):
* TLSv1.2 (IN), TLS handshake, Certificate (11):
* TLSv1.2 (OUT), TLS alert, unknown CA (560):
* SSL certificate problem: unable to get local issuer certificate
* Closing connection 0
curl: (60) SSL certificate problem: unable to get local issuer certificate
More details here: https://curl.haxx.se/docs/sslcerts.html

curl failed to verify the legitimacy of the server and therefore could not
establish a secure connection to it. To learn more about this situation and
how to fix it, please visit the web page mentioned above

I tried reinstalling the certificate but the issue persists, is there anything more I can do?

Newbie

Posts

Joined
Thu Jun 26, 2025 12:55 pm

Post by ADD Creative » Thu Jun 26, 2025 7:59 pm

Your could check your SSL certificate is valid by putting your URL in an online checker.

This should also say which root certificate is needed to validate it. You can then check the CAfile: /etc/pki/tls/certs/ca-bundle.crt contains that root certificate.

www.add-creative.co.uk


Guru Member

Posts

Joined
Sat Jan 14, 2012 1:02 am
Location - United Kingdom

Post by paulfeakins » Fri Jun 27, 2025 7:00 pm

savvasv wrote:
Thu Jun 26, 2025 1:16 pm
I tried reinstalling the certificate but the issue persists, is there anything more I can do?
Try a different type of certificate? Or update OpenSSL on the server?

UK OpenCart Hosting | OpenCart Audits | OpenCart Support - please email info@antropy.co.uk


User avatar
Legendary Member
Online

Posts

Joined
Mon Aug 22, 2011 11:01 pm
Location - London Gatwick, United Kingdom
Who is online

Users browsing this forum: No registered users and 26 guests