Tickets :: Comment on [#14430] pear upgrade-all fails re: certificate verify failed

* Your Email Address
* Spam protection	Enter the letters below: __ .___..___ . __ / ` \| [__ \|/ ` \__. \| \| \__\|\__.
Comment	>> We cannot upgrade Horde using "pear upgrade-all" on a new CentOS 7 >> server. I suspect that it's related to this: >> >> http://php.net/manual/en/migration56.openssl.php >> >> >> Specifically, pear is complaining that the certificate used by >> pear.horde.org cannot be verified as it's self-signed. > > > pear.horde.org does not contain a self-signed cert. It's signed by > letsencrypt. > > Perhaps you need to add the certificate chain to your system? > >> Here is some more information: >> >> [root@www001 ~]# pear -V >> PEAR Version: 1.10.1 >> PHP Version: 5.6.24 >> Zend Engine Version: 2.6.0 >> Running on: Linux www001 3.10.0-327.18.2.el7.x86_64 #1 SMP Thu May 12 >> 11:03:55 UTC 2016 x86_64 >> [root@www001 ~]# pear -vvv upgrade-all >> ... >> Warning: fsockopen(): SSL operation failed with code 1. OpenSSL Error >> messages: >> error:14090086:SSL routines:ssl3_get_server_certificate:certificate >> verify failed in PEAR/REST.php on line 432 >> >> Warning: fsockopen(): Failed to enable crypto in PEAR/REST.php on line 432 >> >> Warning: fsockopen(): unable to connect to ssl://pear.horde.org:443 >> (Unknown error) in PEAR/REST.php on line 432 >> Error getting channel info from pear.horde.org: Connection to >> `ssl://pear.horde.org:443' failed: >> ... >> >> >> This is a serious issue for us, as we're not able to apply >> maintenance upgrade to our webmail software at this time. Thanks. >
Attachment
Watch this ticket

Saved Queries