Get the most out of your Centmin Mod LEMP stack
Become a Member

[Solved] PHP 7.0.11 update causing SSL issues with Google

Discussion in 'Bug Reports' started by Matt, Oct 14, 2016.

  1. Matt

    Matt Well-Known Member

    925
    414
    63
    May 25, 2014
    Rotherham, UK
    Ratings:
    +669
    Local Time:
    5:39 AM
    1.5.15
    MariaDB 10.2
  2. cloud9

    cloud9 Premium Member Premium Member

    431
    117
    43
    Oct 6, 2015
    England
    Ratings:
    +217
    Local Time:
    5:39 AM
    1.25.3
    10.6.x
  3. Sunka

    Sunka Well-Known Member

    1,150
    325
    83
    Oct 31, 2015
    Pula, Croatia
    Ratings:
    +525
    Local Time:
    6:39 AM
    Nginx 1.17.9
    MariaDB 10.3.22
  4. Matt

    Matt Well-Known Member

    925
    414
    63
    May 25, 2014
    Rotherham, UK
    Ratings:
    +669
    Local Time:
    5:39 AM
    1.5.15
    MariaDB 10.2
  5. cloud9

    cloud9 Premium Member Premium Member

    431
    117
    43
    Oct 6, 2015
    England
    Ratings:
    +217
    Local Time:
    5:39 AM
    1.25.3
    10.6.x
    For those that cont do links or read, i think this is what Matt refers to

    Code:
    Removed openssl.cafile = '/etc/ssl/certs/cacert.pem' and restarted php-fpm
    
    Post 7 in the above link
     
  6. Sunka

    Sunka Well-Known Member

    1,150
    325
    83
    Oct 31, 2015
    Pula, Croatia
    Ratings:
    +525
    Local Time:
    6:39 AM
    Nginx 1.17.9
    MariaDB 10.3.22
    So, just remove/cooment in
    /etc/centminmod/php.d/curlcainfo.ini

    this row
    openssl.cafile = '/etc/ssl/certs/cacert.pem'

    and restart php-fpm

    But it is just temporary solution, because during upgrade/recompile PHP, it will be the same.
    Is it not?
     
  7. Matt

    Matt Well-Known Member

    925
    414
    63
    May 25, 2014
    Rotherham, UK
    Ratings:
    +669
    Local Time:
    5:39 AM
    1.5.15
    MariaDB 10.2
    Yes, it's just a temp fix until @eva2000 looks at the script and decides what to do (ie update the ca file, or remove the part where it's being added)
     
  8. rdan

    rdan Well-Known Member

    5,439
    1,398
    113
    May 25, 2014
    Ratings:
    +2,187
    Local Time:
    12:39 PM
    Mainline
    10.2
  9. eva2000

    eva2000 Administrator Staff Member

    53,211
    12,113
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +18,650
    Local Time:
    2:39 PM
    Nginx 1.27.x
    MariaDB 10.x/11.4+
    strange cacert file should be auto updated from cURL - Extract CA Certs from Mozilla

    But i have updated Centmin Mod 123.09beta01 (only branch to have this change to add openssl.cafile for testing). Recompiling php via centmin.sh menu option 5 should remove it too.
     
  10. Sunka

    Sunka Well-Known Member

    1,150
    325
    83
    Oct 31, 2015
    Pula, Croatia
    Ratings:
    +525
    Local Time:
    6:39 AM
    Nginx 1.17.9
    MariaDB 10.3.22
    So @eva2000 , after I update to newest php, this error should be gone
    I no need to run before (or after)
    Code:
    CURL_CACERTURL='https://curl.haxx.se/ca/cacert.pem'
    wget -q -O /etc/ssl/certs/cacert.pem $CURL_CACERTURL
    echo "curl.cainfo = '/etc/ssl/certs/cacert.pem'" > /etc/centminmod/php.d/curlcainfo.ini
    nprestart
     
  11. eva2000

    eva2000 Administrator Staff Member

    53,211
    12,113
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +18,650
    Local Time:
    2:39 PM
    Nginx 1.27.x
    MariaDB 10.x/11.4+
    those commands are already run each php upgrade and it's for curl.cainfo not openssl.cafile

    php upgrades automatically remove openssl.cafile line if found
     
  12. Sunka

    Sunka Well-Known Member

    1,150
    325
    83
    Oct 31, 2015
    Pula, Croatia
    Ratings:
    +525
    Local Time:
    6:39 AM
    Nginx 1.17.9
    MariaDB 10.3.22
    OK, so just update/recompile php should fix error?
     
  13. eva2000

    eva2000 Administrator Staff Member

    53,211
    12,113
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +18,650
    Local Time:
    2:39 PM
    Nginx 1.27.x
    MariaDB 10.x/11.4+
    yup :)
     
  14. dorobo

    dorobo Active Member

    420
    104
    43
    Jun 6, 2014
    Ratings:
    +162
    Local Time:
    12:39 PM
    latest
    latest
    was this fixed in 7.0.12?
     
  15. eva2000

    eva2000 Administrator Staff Member

    53,211
    12,113
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +18,650
    Local Time:
    2:39 PM
    Nginx 1.27.x
    MariaDB 10.x/11.4+
    Not php bug but centmin mod 123.09beta01 bug fixed now :)