Tickets :: [#14430] pear upgrade-all fails re: certificate verify failed

6.0.0-alpha14

7/2/25

Summary	pear upgrade-all fails re: certificate verify failed
Queue	Horde.org Servers
Queue Version	PEAR server
Type	Bug
State	Not A Bug
Priority	1. Low
Owners
Requester	aaronp (at) critd (dot) com
Created	07/28/2016 (3261 days ago)
Due
Updated	09/07/2016 (3220 days ago)
Assigned	07/28/2016 (3261 days ago)
Resolved	07/29/2016 (3260 days ago)
Github Issue Link
Github Pull Request
Milestone
Patch	No

09/07/2016 03:03:07 PM	g (dot) tranelli (at) inarcassa (dot) it	Comment #3	Reply to this comment
[Show Quoted Text - 42 lines][Hide Quoted Text] We cannot upgrade Horde using "pear upgrade-all" on a new CentOS 7 server. I suspect that it's related to this: http://php.net/manual/en/migration56.openssl.php Specifically, pear is complaining that the certificate used by pear.horde.org cannot be verified as it's self-signed. pear.horde.org does not contain a self-signed cert. It's signed by letsencrypt. Perhaps you need to add the certificate chain to your system? Here is some more information: [root@www001 ~]# pear -V PEAR Version: 1.10.1 PHP Version: 5.6.24 Zend Engine Version: 2.6.0 Running on: Linux www001 3.10.0-327.18.2.el7.x86_64 #1 SMP Thu May 12 11:03:55 UTC 2016 x86_64 [root@www001 ~]# pear -vvv upgrade-all ... Warning: fsockopen(): SSL operation failed with code 1. OpenSSL Error messages: error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed in PEAR/REST.php on line 432 Warning: fsockopen(): Failed to enable crypto in PEAR/REST.php on line 432 Warning: fsockopen(): unable to connect to ssl://pear.horde.org:443 (Unknown error) in PEAR/REST.php on line 432 Error getting channel info from pear.horde.org: Connection to `ssl://pear.horde.org:443' failed: ... This is a serious issue for us, as we're not able to apply maintenance upgrade to our webmail software at this time. Thanks. I have the same issue on RHEL6.8. What do you mean "you need to add the certificate chain to your system?" Thanks

07/29/2016 10:13:34 PM	Michael Rubinsky	State ⇒ Not A Bug

07/28/2016 04:25:49 PM	Michael Rubinsky	Comment #2 State ⇒ Feedback	Reply to this comment
We cannot upgrade Horde using "pear upgrade-all" on a new CentOS 7 server. I suspect that it's related to this: http://php.net/manual/en/migration56.openssl.php Specifically, pear is complaining that the certificate used by pear.horde.org cannot be verified as it's self-signed. pear.horde.org does not contain a self-signed cert. It's signed by letsencrypt. Perhaps you need to add the certificate chain to your system? [Show Quoted Text - 26 lines][Hide Quoted Text] Here is some more information: [root@www001 ~]# pear -V PEAR Version: 1.10.1 PHP Version: 5.6.24 Zend Engine Version: 2.6.0 Running on: Linux www001 3.10.0-327.18.2.el7.x86_64 #1 SMP Thu May 12 11:03:55 UTC 2016 x86_64 [root@www001 ~]# pear -vvv upgrade-all ... Warning: fsockopen(): SSL operation failed with code 1. OpenSSL Error messages: error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed in PEAR/REST.php on line 432 Warning: fsockopen(): Failed to enable crypto in PEAR/REST.php on line 432 Warning: fsockopen(): unable to connect to ssl://pear.horde.org:443 (Unknown error) in PEAR/REST.php on line 432 Error getting channel info from pear.horde.org: Connection to `ssl://pear.horde.org:443' failed: ... This is a serious issue for us, as we're not able to apply maintenance upgrade to our webmail software at this time. Thanks.

07/28/2016 04:03:13 PM	aaronp (at) critd (dot) com	Comment #1 Priority ⇒ 1. Low Patch ⇒ No Milestone ⇒ Queue ⇒ Horde.org Servers Summary ⇒ pear upgrade-all fails re: certificate verify failed Type ⇒ Bug State ⇒ Unconfirmed	Reply to this comment
We cannot upgrade Horde using "pear upgrade-all" on a new CentOS 7 server. I suspect that it's related to this: http://php.net/manual/en/migration56.openssl.php Specifically, pear is complaining that the certificate used by pear.horde.org cannot be verified as it's self-signed. Here is some more information: [root@www001 ~]# pear -V PEAR Version: 1.10.1 PHP Version: 5.6.24 Zend Engine Version: 2.6.0 Running on: Linux www001 3.10.0-327.18.2.el7.x86_64 #1 SMP Thu May 12 11:03:55 UTC 2016 x86_64 [root@www001 ~]# pear -vvv upgrade-all ... Warning: fsockopen(): SSL operation failed with code 1. OpenSSL Error messages: error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed in PEAR/REST.php on line 432 Warning: fsockopen(): Failed to enable crypto in PEAR/REST.php on line 432 Warning: fsockopen(): unable to connect to ssl://pear.horde.org:443 (Unknown error) in PEAR/REST.php on line 432 Error getting channel info from pear.horde.org: Connection to `ssl://pear.horde.org:443' failed: ... This is a serious issue for us, as we're not able to apply maintenance upgrade to our webmail software at this time. Thanks.