curl命令ssl错误_PHP，SSL和cURL SSL3_GET_SERVER_CERTIFICATE错误

curl命令ssl错误

I recently developed a complex system for a customer that involved PHP, cURL, and a SSL connection to a third party vendor. The third party vendor would validate the security certificate of the source (the system I created) and either allow or reject access. My code looked like this:

我最近为客户开发了一个复杂的系统，该系统涉及PHP，cURL和与第三方供应商的SSL连接。 第三方供应商将验证源(我创建的系统)的安全证书，并允许或拒绝访问。 我的代码如下所示：

$ch = curl_init();
curl_setopt($ch,CURLOPT_URL,'https://thirdparty.com/token.php'); //not the actual site
curl_setopt($ch,CURLOPT_TIMEOUT,60);
curl_setopt($ch,CURLOPT_RETURNTRANSFER,1);
curl_setopt($ch,CURLOPT_POST,1);
curl_setopt($ch,CURLOPT_POSTFIELDS,'customer_id='.$cid.'&password='.$pass);
curl_setopt($ch,CURLOPT_SSL_VERIFYPEER,true); 
curl_setopt($ch,CURLOPT_CAINFO,'ca-bundle.crt'); /* problem here! */
$result = curl_exec($ch);
if(empty($result)) { /* error: nothing returned */ } else { /* success! */ }
curl_close($ch);

Unfortunately I was persistently receiving the following error message:

不幸的是，我一直收到以下错误消息：

error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed

错误：14090086：SSL例程：SSL3_GET_SERVER_CERTIFICATE：证书验证失败

It turns out that the SSL bundle file I was using was old, as was the default bundle that came with the old version of cURL the shared hosting server. Essentially the third party didn't trust that the system's SSL certificate was valid. I downloaded Mozilla's bundle file, named it mozilla.pem and changed my PHP code to:

事实证明，我使用的SSL捆绑包文件很旧，而旧版本的cURL(共享托管服务器)随附的默认捆绑包也很旧。 本质上，第三方不信任系统的SSL证书有效。 我下载了Mozilla的捆绑文件 ，将其命名为mozilla.pem并将PHP代码更改为：

$ch = curl_init();
curl_setopt($ch,CURLOPT_URL,'https://thirdparty.com/token.php'); //not the actual site
curl_setopt($ch,CURLOPT_TIMEOUT,60);
curl_setopt($ch,CURLOPT_RETURNTRANSFER,1);
curl_setopt($ch,CURLOPT_POST,1);
curl_setopt($ch,CURLOPT_POSTFIELDS,'customer_id='.$cid.'&password='.$pass);
curl_setopt($ch,CURLOPT_SSL_VERIFYPEER,true); 
curl_setopt($ch,CURLOPT_CAINFO,'mozilla.pem'); /* fixed! */
$result = curl_exec($ch);
if(empty($result)) { /* error: nothing returned */ } else { /* success! */ }
curl_close($ch);

I share this with you because it cost me over three hours. Hopefully this will save someone time and frustration in the future.

我与您分享，因为这花费了我三个多小时。 希望这可以节省将来的时间和挫败感。

翻译自: https://davidwalsh.name/php-ssl-curl-error

curl命令ssl错误