doujia2463 2016-07-14 16:35
浏览 48


I'm trying to setup our internal Satis server which should be reachable via HTTPS (certificate is signed by an internal CA). On Linux, everything works as expected once the root certificate of the CA is added to certificate store (e.g. /etc/ssl/certs/ca-certificates.crt). But on my Mac, I'm getting a "SSL operation failed with code 1" error even after adding the certificate to the OS X Keychain. Curl on the command line and using libcurl in PHP can fetch the HTTPS URL but Composer and file_get_contents (which is used by Composer) always throw the "SSL operation failed with code 1" error.

I know I can specify the "openssl.capath" in my php.ini but why does it work with Curl without specifying the path?

  • 写回答

1条回答 默认 最新

  • doutan4831 2016-07-15 12:29

    I finally figured out what's wrong:

    Curl is using SecureTransport instead of OpenSSL, so it's directly using the OS X Keychain and therefore works with certificates signed by public CAs as well as our internal CA (I've added it to the System keychain before).

    file_get_contents is using OpenSSL which uses it's own CA bundle located at /usr/local/etc/openssl/cert.pem.

    As /usr/local/etc/openssl/cert.pem only contains public CAs by default, I had to export the certificates from my Keychain (System and System Roots) to the cert.pem of OpenSSL: security find-certificate -a -p /Library/Keychains/System.keychain /System/Library/Keychains/SystemRootCertificates.keychain | sudo tee /usr/local/etc/openssl/cert.pem

    Now file_get_contents() works for both, internal as well as external certificates/CAs.

    But Composer does not look into /usr/local/etc/openssl/cert.pem, so I had to set the openssl.cafile php.ini property to the path of the cert.pem:

    [openssl] openssl.cafile = /usr/local/etc/openssl/cert.pem

    本回答被题主选为最佳回答 , 对您是否有帮助呢?



  • ¥20 代码实现状态连接包过滤防火墙的设计与实现
  • ¥15 vscode的红色箭头爆红和has no default export报错
  • ¥15 关于#sql#的问题:#情况描述 在用vs对项目进行调试时,出现找不到网络路径,然后查看SQL配置工具,发现SQL服务显示远程调用过程失败(相关搜索:防火墙)
  • ¥15 eNSP中基于默认路由及浮动路由的公司与分部互联和校园网综合项目
  • ¥15 主要进行描述泥浆在管路不同区段泥浆的密度不相同,泥浆的密度有高有低,此时管路的摩阻分布需要怎么计算,(标签-matlab)
  • ¥40 通过编制程序计算圆管内层流充分发展对流换热,参数如图5-4,以及公式5-16所示,要求用表5-6对程序计算准确性进行验证
  • ¥20 该学习哪个编程语言? AI会取代程序员吗?
  • ¥15 ensp如何拼通IP地址
  • ¥15 saber软件导入Ibis模型报错
  • ¥15 商城生产日期批次库存问题