php关闭证书验证失败,php – SSL错误SSL3_GET_SERVER_CERTIFICATE：证书验证失败

升级到PHP 5.6后，我尝试通过fsockopen()连接到服务器时出现错误..

服务器(主机)上的证书是自签名的

PHP Warning: fsockopen(): SSL operation failed with code 1. OpenSSL Error messages:

error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed

码

if($fp = fsockopen($host, $port, $errno, $errstr, 20)){

$this->request = 'POST '.substr($this->url, strlen($this->host)).' HTTP/1.1'.$crlf

.'Host: '.$this->host.$crlf

.'Content-Length: '.$content_length.$crlf

.'Connection: Close'.$crlf.$crlf

.$body;

fwrite($fp, $this->request);

while($line = fgets($fp)){

if($line !== false){

$this->response .= $line;

}

}

fclose($fp);

}

试过

# cd /etc/ssl/certs/

# wget http://curl.haxx.se/ca/cacert.pem

php.ini

openssl.cafile = "/etc/ssl/certs/cacert.pem"

但脚本仍然无法工作

更新

这工作

echo file_get_contents("/etc/ssl/certs/cacert.pem");

更新2

$contextOptions = array(

'ssl' => array(

'verify_peer' => true, // You could skip all of the trouble by changing this to false, but it's WAY uncool for security reasons.

'cafile' => '/etc/ssl/certs/cacert.pem',

//'CN_match' => 'example.com', // Change this to your certificates Common Name (or just comment this line out if not needed)

'ciphers' => 'HIGH:!SSLv2:!SSLv3',

'disable_compression' => true,

)

);

$context = stream_context_create($contextOptions);

$fp = stream_socket_client("{$host}:{$port}", $errno, $errstr, 20, STREAM_CLIENT_CONNECT, $context);

错误

PHP Warning: stream_socket_client(): SSL operation failed with code 1. OpenSSL Error messages:

error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed