Learn about Centmin Mod LEMP Stack today
Register Now

[Solved] PHP 7.0.11 update causing SSL issues with Google

Discussion in 'Bug Reports' started by Matt, Oct 14, 2016.

  1. Matt

    Matt Moderator Staff Member

    693
    320
    63
    May 25, 2014
    Sheffield, UK
    Ratings:
    +447
    Local Time:
    9:50 PM
    1.7.1
    MariaDB 10
    • Informative Informative x 2
    • Like Like x 1
  2. cloud9

    cloud9 Premium Member Premium Member

    140
    54
    28
    Oct 6, 2015
    England
    Ratings:
    +75
    Local Time:
    9:50 PM
    1.11.x
    10.x
    • Like Like x 1
  3. Sunka

    Sunka Active Member

    926
    240
    43
    Oct 31, 2015
    Rijeka, Croatia
    Ratings:
    +389
    Local Time:
    10:50 PM
    Nginx 1.13.3
    MariaDB 10.1.24
  4. Matt

    Matt Moderator Staff Member

    693
    320
    63
    May 25, 2014
    Sheffield, UK
    Ratings:
    +447
    Local Time:
    9:50 PM
    1.7.1
    MariaDB 10
    • Like Like x 1
  5. cloud9

    cloud9 Premium Member Premium Member

    140
    54
    28
    Oct 6, 2015
    England
    Ratings:
    +75
    Local Time:
    9:50 PM
    1.11.x
    10.x
    For those that cont do links or read, i think this is what Matt refers to

    Code:
    Removed openssl.cafile = '/etc/ssl/certs/cacert.pem' and restarted php-fpm
    
    Post 7 in the above link
     
  6. Sunka

    Sunka Active Member

    926
    240
    43
    Oct 31, 2015
    Rijeka, Croatia
    Ratings:
    +389
    Local Time:
    10:50 PM
    Nginx 1.13.3
    MariaDB 10.1.24
    So, just remove/cooment in
    /etc/centminmod/php.d/curlcainfo.ini

    this row
    openssl.cafile = '/etc/ssl/certs/cacert.pem'

    and restart php-fpm

    But it is just temporary solution, because during upgrade/recompile PHP, it will be the same.
    Is it not?
     
  7. Matt

    Matt Moderator Staff Member

    693
    320
    63
    May 25, 2014
    Sheffield, UK
    Ratings:
    +447
    Local Time:
    9:50 PM
    1.7.1
    MariaDB 10
    Yes, it's just a temp fix until @eva2000 looks at the script and decides what to do (ie update the ca file, or remove the part where it's being added)
     
    • Agree Agree x 2
  8. RoldanLT

    RoldanLT Well-Known Member

    3,936
    961
    113
    May 25, 2014
    Phillipines
    Ratings:
    +1,312
    Local Time:
    5:50 AM
    1.11
    10.2
  9. eva2000

    eva2000 Administrator Staff Member

    30,605
    6,862
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +10,297
    Local Time:
    7:50 AM
    Nginx 1.13.x
    MariaDB 5.5
    strange cacert file should be auto updated from cURL - Extract CA Certs from Mozilla

    But i have updated Centmin Mod 123.09beta01 (only branch to have this change to add openssl.cafile for testing). Recompiling php via centmin.sh menu option 5 should remove it too.
     
  10. Sunka

    Sunka Active Member

    926
    240
    43
    Oct 31, 2015
    Rijeka, Croatia
    Ratings:
    +389
    Local Time:
    10:50 PM
    Nginx 1.13.3
    MariaDB 10.1.24
    So @eva2000 , after I update to newest php, this error should be gone
    I no need to run before (or after)
    Code:
    CURL_CACERTURL='https://curl.haxx.se/ca/cacert.pem'
    wget -q -O /etc/ssl/certs/cacert.pem $CURL_CACERTURL
    echo "curl.cainfo = '/etc/ssl/certs/cacert.pem'" > /etc/centminmod/php.d/curlcainfo.ini
    nprestart
     
  11. eva2000

    eva2000 Administrator Staff Member

    30,605
    6,862
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +10,297
    Local Time:
    7:50 AM
    Nginx 1.13.x
    MariaDB 5.5
    those commands are already run each php upgrade and it's for curl.cainfo not openssl.cafile

    php upgrades automatically remove openssl.cafile line if found
     
  12. Sunka

    Sunka Active Member

    926
    240
    43
    Oct 31, 2015
    Rijeka, Croatia
    Ratings:
    +389
    Local Time:
    10:50 PM
    Nginx 1.13.3
    MariaDB 10.1.24
    OK, so just update/recompile php should fix error?
     
  13. eva2000

    eva2000 Administrator Staff Member

    30,605
    6,862
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +10,297
    Local Time:
    7:50 AM
    Nginx 1.13.x
    MariaDB 5.5
    yup :)
     
    • Like Like x 1
  14. dorobo

    dorobo Active Member

    420
    104
    43
    Jun 6, 2014
    Ratings:
    +162
    Local Time:
    5:50 AM
    latest
    latest
    was this fixed in 7.0.12?
     
  15. eva2000

    eva2000 Administrator Staff Member

    30,605
    6,862
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +10,297
    Local Time:
    7:50 AM
    Nginx 1.13.x
    MariaDB 5.5
    Not php bug but centmin mod 123.09beta01 bug fixed now :)
     
    • Like Like x 4