Want more timely Centmin Mod News Updates?
Become a Member

[Solved] PHP 7.0.11 update causing SSL issues with Google

Discussion in 'Bug Reports' started by Matt, Oct 14, 2016.

  1. Matt

    Matt Moderator Staff Member

    862
    387
    63
    May 25, 2014
    Rotherham, UK
    Ratings:
    +606
    Local Time:
    8:07 PM
    1.5.15
    MariaDB 10.2
  2. cloud9

    cloud9 Premium Member Premium Member

    142
    54
    28
    Oct 6, 2015
    England
    Ratings:
    +75
    Local Time:
    8:07 PM
    1.17.x
    10.x
  3. Sunka

    Sunka Well-Known Member

    1,140
    312
    83
    Oct 31, 2015
    Pula, Croatia
    Ratings:
    +508
    Local Time:
    9:07 PM
    Nginx 1.17.9
    MariaDB 10.3.22
  4. Matt

    Matt Moderator Staff Member

    862
    387
    63
    May 25, 2014
    Rotherham, UK
    Ratings:
    +606
    Local Time:
    8:07 PM
    1.5.15
    MariaDB 10.2
  5. cloud9

    cloud9 Premium Member Premium Member

    142
    54
    28
    Oct 6, 2015
    England
    Ratings:
    +75
    Local Time:
    8:07 PM
    1.17.x
    10.x
    For those that cont do links or read, i think this is what Matt refers to

    Code:
    Removed openssl.cafile = '/etc/ssl/certs/cacert.pem' and restarted php-fpm
    
    Post 7 in the above link
     
  6. Sunka

    Sunka Well-Known Member

    1,140
    312
    83
    Oct 31, 2015
    Pula, Croatia
    Ratings:
    +508
    Local Time:
    9:07 PM
    Nginx 1.17.9
    MariaDB 10.3.22
    So, just remove/cooment in
    /etc/centminmod/php.d/curlcainfo.ini

    this row
    openssl.cafile = '/etc/ssl/certs/cacert.pem'

    and restart php-fpm

    But it is just temporary solution, because during upgrade/recompile PHP, it will be the same.
    Is it not?
     
  7. Matt

    Matt Moderator Staff Member

    862
    387
    63
    May 25, 2014
    Rotherham, UK
    Ratings:
    +606
    Local Time:
    8:07 PM
    1.5.15
    MariaDB 10.2
    Yes, it's just a temp fix until @eva2000 looks at the script and decides what to do (ie update the ca file, or remove the part where it's being added)
     
  8. rdan

    rdan Well-Known Member

    4,959
    1,182
    113
    May 25, 2014
    Ratings:
    +1,795
    Local Time:
    3:07 AM
    Mainline
    10.2
  9. eva2000

    eva2000 Administrator Staff Member

    44,702
    10,193
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +15,795
    Local Time:
    5:07 AM
    Nginx 1.17.x
    MariaDB 5.5/10.x
    strange cacert file should be auto updated from cURL - Extract CA Certs from Mozilla

    But i have updated Centmin Mod 123.09beta01 (only branch to have this change to add openssl.cafile for testing). Recompiling php via centmin.sh menu option 5 should remove it too.
     
  10. Sunka

    Sunka Well-Known Member

    1,140
    312
    83
    Oct 31, 2015
    Pula, Croatia
    Ratings:
    +508
    Local Time:
    9:07 PM
    Nginx 1.17.9
    MariaDB 10.3.22
    So @eva2000 , after I update to newest php, this error should be gone
    I no need to run before (or after)
    Code:
    CURL_CACERTURL='https://curl.haxx.se/ca/cacert.pem'
    wget -q -O /etc/ssl/certs/cacert.pem $CURL_CACERTURL
    echo "curl.cainfo = '/etc/ssl/certs/cacert.pem'" > /etc/centminmod/php.d/curlcainfo.ini
    nprestart
     
  11. eva2000

    eva2000 Administrator Staff Member

    44,702
    10,193
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +15,795
    Local Time:
    5:07 AM
    Nginx 1.17.x
    MariaDB 5.5/10.x
    those commands are already run each php upgrade and it's for curl.cainfo not openssl.cafile

    php upgrades automatically remove openssl.cafile line if found
     
  12. Sunka

    Sunka Well-Known Member

    1,140
    312
    83
    Oct 31, 2015
    Pula, Croatia
    Ratings:
    +508
    Local Time:
    9:07 PM
    Nginx 1.17.9
    MariaDB 10.3.22
    OK, so just update/recompile php should fix error?
     
  13. eva2000

    eva2000 Administrator Staff Member

    44,702
    10,193
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +15,795
    Local Time:
    5:07 AM
    Nginx 1.17.x
    MariaDB 5.5/10.x
    yup :)
     
  14. dorobo

    dorobo Active Member

    420
    104
    43
    Jun 6, 2014
    Ratings:
    +162
    Local Time:
    3:07 AM
    latest
    latest
    was this fixed in 7.0.12?
     
  15. eva2000

    eva2000 Administrator Staff Member

    44,702
    10,193
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +15,795
    Local Time:
    5:07 AM
    Nginx 1.17.x
    MariaDB 5.5/10.x
    Not php bug but centmin mod 123.09beta01 bug fixed now :)