Tickets :: Comment on [#14430] pear upgrade-all fails re: certificate verify failed

* Your Email Address
* Spam protection	Enter the letters below: .___..__ .__ .___..___. \| [__)[__) _/ \| \| \| \| \./__. \|
Comment	>>> We cannot upgrade Horde using "pear upgrade-all" on a new CentOS 7 >>> server. I suspect that it's related to this: >>> >>> http://php.net/manual/en/migration56.openssl.php >>> >>> >>> Specifically, pear is complaining that the certificate used by >>> pear.horde.org cannot be verified as it's self-signed. >> >> >> pear.horde.org does not contain a self-signed cert. It's signed by >> letsencrypt. >> >> Perhaps you need to add the certificate chain to your system? >> >>> Here is some more information: >>> >>> [root@www001 ~]# pear -V >>> PEAR Version: 1.10.1 >>> PHP Version: 5.6.24 >>> Zend Engine Version: 2.6.0 >>> Running on: Linux www001 3.10.0-327.18.2.el7.x86_64 #1 SMP Thu May 12 >>> 11:03:55 UTC 2016 x86_64 >>> [root@www001 ~]# pear -vvv upgrade-all >>> ... >>> Warning: fsockopen(): SSL operation failed with code 1. OpenSSL Error >>> messages: >>> error:14090086:SSL routines:ssl3_get_server_certificate:certificate >>> verify failed in PEAR/REST.php on line 432 >>> >>> Warning: fsockopen(): Failed to enable crypto in PEAR/REST.php on line 432 >>> >>> Warning: fsockopen(): unable to connect to ssl://pear.horde.org:443 >>> (Unknown error) in PEAR/REST.php on line 432 >>> Error getting channel info from pear.horde.org: Connection to >>> `ssl://pear.horde.org:443' failed: >>> ... >>> >>> >>> This is a serious issue for us, as we're not able to apply >>> maintenance upgrade to our webmail software at this time. Thanks. >> > > > I have the same issue on RHEL6.8. > What do you mean "you need to add the certificate chain to your system?" > > Thanks
Attachment
Watch this ticket

Saved Queries