PHP (7.1) issue with mail , openssl , certificate
0
In the php.ini I have:
[openssl]
openssl.cafile= /etc/ssl/cert/mydomaincabundle.crt
this line allow email from PHP with SMTP to be sent from PHP es Wordpress or PHP application as i use mydomain.ext certificate.
Now that I need use composer I discovered this line generate SSL error when PHP app like composer try to download data. The error is:
file could not be downloaded: SSL operation failed with code 1. OpenSSL Error messages:
error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed
Failed to enable crypto
failed to open stream: operation failed
Now trying to download from source
If i remove the php.ini line
[openssl]
openssl.cafile= /etc/ssl/cert/mydomaincabundle.crt
this issue is solved but i start to see all PHP mail fail so applications like Wordpress etc are unable to send email.
How I can have mail working and also solve the PHP SSL issue?
If i remove the openssl line with the certificate email sent with SMTP SSL will fail.
Connection: opening to ssl://domain.it:465, timeout=300, options=array ()
Connection: Failed to connect to server. Error number 2. "Error notice: stream_socket_client(): SSL operation failed with code 1. OpenSSL Error messages:error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed
Connection: Failed to connect to server. Error number 2. "Error notice: stream_socket_client(): Failed to enable crypto
Connection: Failed to connect to server. Error number 2. "Error notice: stream_socket_client(): unable to connect to ssl://domain.it:465 (Unknown error)
SMTP ERROR: Failed to connect to server: (0)
SMTP connect() failed. https://github.com/PHPMailer/PHPMailer/wiki/Troubleshooting
Thank you.
php openssl dovecot exim
edited Nov 17 '18 at 15:09
Ali
355314
asked Nov 17 '18 at 13:27
PeopleInsidePeopleInside
1710
add a comment |
0
In the php.ini I have:
[openssl]
openssl.cafile= /etc/ssl/cert/mydomaincabundle.crt
this line allow email from PHP with SMTP to be sent from PHP es Wordpress or PHP application as i use mydomain.ext certificate.
Now that I need use composer I discovered this line generate SSL error when PHP app like composer try to download data. The error is:
file could not be downloaded: SSL operation failed with code 1. OpenSSL Error messages:
error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed
Failed to enable crypto
failed to open stream: operation failed
Now trying to download from source
If i remove the php.ini line
[openssl]
openssl.cafile= /etc/ssl/cert/mydomaincabundle.crt
this issue is solved but i start to see all PHP mail fail so applications like Wordpress etc are unable to send email.
How I can have mail working and also solve the PHP SSL issue?
If i remove the openssl line with the certificate email sent with SMTP SSL will fail.
Connection: opening to ssl://domain.it:465, timeout=300, options=array ()
Connection: Failed to connect to server. Error number 2. "Error notice: stream_socket_client(): SSL operation failed with code 1. OpenSSL Error messages:error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed
Connection: Failed to connect to server. Error number 2. "Error notice: stream_socket_client(): Failed to enable crypto
Connection: Failed to connect to server. Error number 2. "Error notice: stream_socket_client(): unable to connect to ssl://domain.it:465 (Unknown error)
SMTP ERROR: Failed to connect to server: (0)
SMTP connect() failed. https://github.com/PHPMailer/PHPMailer/wiki/Troubleshooting
Thank you.
php openssl dovecot exim
edited Nov 17 '18 at 15:09
Ali
355314
asked Nov 17 '18 at 13:27
PeopleInsidePeopleInside
1710
You'd normally setopenssl.capathto the directory containing global and (presumably) local certificates. If you set a singlecafileinstead only that will be used for all socket connections.
– mario
Nov 17 '18 at 13:55
Hi @mario , I do not know how to solve this issue. If i remove the openssl.cafile mail stop to work but i resolve composer SSL issue, if I keep i will have mail working but composer unable to work with SSL issue.
– PeopleInside
Nov 17 '18 at 15:14
You already mentioned that. How about answering thecapthquestion or your /etc/ssl/certs` setup? See also How do you add a certificate authority (CA) to Ubuntu?
– mario
Nov 17 '18 at 15:24
Hi @mario , thanks for the answer. I try to replace cafile with capath tried to set the path to /etc/ssl/certs but email stop to work. Inside i see some symbolic links to some ca-boundle.crt - never idea on what to do. I am just understand since i add the cafile to point to my domain certificate this works for emails but not for the server so mail is working and using the right certificate, if i remove this composer will use maybe a trust server certificate that i do not know where is but not works for email. Maybe in my domain certificate i need include something else... never idea.
– PeopleInside
Nov 17 '18 at 17:27
add a comment |
0
0
0
In the php.ini I have:
[openssl]
openssl.cafile= /etc/ssl/cert/mydomaincabundle.crt
this line allow email from PHP with SMTP to be sent from PHP es Wordpress or PHP application as i use mydomain.ext certificate.
Now that I need use composer I discovered this line generate SSL error when PHP app like composer try to download data. The error is:
file could not be downloaded: SSL operation failed with code 1. OpenSSL Error messages:
error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed
Failed to enable crypto
failed to open stream: operation failed
Now trying to download from source
If i remove the php.ini line
[openssl]
openssl.cafile= /etc/ssl/cert/mydomaincabundle.crt
this issue is solved but i start to see all PHP mail fail so applications like Wordpress etc are unable to send email.
How I can have mail working and also solve the PHP SSL issue?
If i remove the openssl line with the certificate email sent with SMTP SSL will fail.
Connection: opening to ssl://domain.it:465, timeout=300, options=array ()
Connection: Failed to connect to server. Error number 2. "Error notice: stream_socket_client(): SSL operation failed with code 1. OpenSSL Error messages:error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed
Connection: Failed to connect to server. Error number 2. "Error notice: stream_socket_client(): Failed to enable crypto
Connection: Failed to connect to server. Error number 2. "Error notice: stream_socket_client(): unable to connect to ssl://domain.it:465 (Unknown error)
SMTP ERROR: Failed to connect to server: (0)
SMTP connect() failed. https://github.com/PHPMailer/PHPMailer/wiki/Troubleshooting
Thank you.
php openssl dovecot exim
edited Nov 17 '18 at 15:09
Ali
355314
asked Nov 17 '18 at 13:27
PeopleInsidePeopleInside
1710
In the php.ini I have:
[openssl]
openssl.cafile= /etc/ssl/cert/mydomaincabundle.crt
this line allow email from PHP with SMTP to be sent from PHP es Wordpress or PHP application as i use mydomain.ext certificate.
Now that I need use composer I discovered this line generate SSL error when PHP app like composer try to download data. The error is:
file could not be downloaded: SSL operation failed with code 1. OpenSSL Error messages:
error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed
Failed to enable crypto
failed to open stream: operation failed
Now trying to download from source
If i remove the php.ini line
[openssl]
openssl.cafile= /etc/ssl/cert/mydomaincabundle.crt
this issue is solved but i start to see all PHP mail fail so applications like Wordpress etc are unable to send email.
How I can have mail working and also solve the PHP SSL issue?
If i remove the openssl line with the certificate email sent with SMTP SSL will fail.
Connection: opening to ssl://domain.it:465, timeout=300, options=array ()
Connection: Failed to connect to server. Error number 2. "Error notice: stream_socket_client(): SSL operation failed with code 1. OpenSSL Error messages:error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed
Connection: Failed to connect to server. Error number 2. "Error notice: stream_socket_client(): Failed to enable crypto
Connection: Failed to connect to server. Error number 2. "Error notice: stream_socket_client(): unable to connect to ssl://domain.it:465 (Unknown error)
SMTP ERROR: Failed to connect to server: (0)
SMTP connect() failed. https://github.com/PHPMailer/PHPMailer/wiki/Troubleshooting
Thank you.
php openssl dovecot exim
php openssl dovecot exim
edited Nov 17 '18 at 15:09
Ali
355314
asked Nov 17 '18 at 13:27
PeopleInsidePeopleInside
1710
edited Nov 17 '18 at 15:09
Ali
355314
asked Nov 17 '18 at 13:27
PeopleInsidePeopleInside
1710
edited Nov 17 '18 at 15:09
Ali
355314
edited Nov 17 '18 at 15:09
Ali
355314
edited Nov 17 '18 at 15:09
Ali
355314
355314
asked Nov 17 '18 at 13:27
PeopleInsidePeopleInside
1710
asked Nov 17 '18 at 13:27
PeopleInsidePeopleInside
1710
asked Nov 17 '18 at 13:27
PeopleInsidePeopleInside
1710
1710
You'd normally setopenssl.capathto the directory containing global and (presumably) local certificates. If you set a singlecafileinstead only that will be used for all socket connections.
– mario
Nov 17 '18 at 13:55
Hi @mario , I do not know how to solve this issue. If i remove the openssl.cafile mail stop to work but i resolve composer SSL issue, if I keep i will have mail working but composer unable to work with SSL issue.
– PeopleInside
Nov 17 '18 at 15:14
You already mentioned that. How about answering thecapthquestion or your /etc/ssl/certs` setup? See also How do you add a certificate authority (CA) to Ubuntu?
– mario
Nov 17 '18 at 15:24
Hi @mario , thanks for the answer. I try to replace cafile with capath tried to set the path to /etc/ssl/certs but email stop to work. Inside i see some symbolic links to some ca-boundle.crt - never idea on what to do. I am just understand since i add the cafile to point to my domain certificate this works for emails but not for the server so mail is working and using the right certificate, if i remove this composer will use maybe a trust server certificate that i do not know where is but not works for email. Maybe in my domain certificate i need include something else... never idea.
– PeopleInside
Nov 17 '18 at 17:27
add a comment |
You'd normally setopenssl.capathto the directory containing global and (presumably) local certificates. If you set a singlecafileinstead only that will be used for all socket connections.
– mario
Nov 17 '18 at 13:55
Hi @mario , I do not know how to solve this issue. If i remove the openssl.cafile mail stop to work but i resolve composer SSL issue, if I keep i will have mail working but composer unable to work with SSL issue.
– PeopleInside
Nov 17 '18 at 15:14
You already mentioned that. How about answering thecapthquestion or your /etc/ssl/certs` setup? See also How do you add a certificate authority (CA) to Ubuntu?
– mario
Nov 17 '18 at 15:24
Hi @mario , thanks for the answer. I try to replace cafile with capath tried to set the path to /etc/ssl/certs but email stop to work. Inside i see some symbolic links to some ca-boundle.crt - never idea on what to do. I am just understand since i add the cafile to point to my domain certificate this works for emails but not for the server so mail is working and using the right certificate, if i remove this composer will use maybe a trust server certificate that i do not know where is but not works for email. Maybe in my domain certificate i need include something else... never idea.
– PeopleInside
Nov 17 '18 at 17:27
You'd normally set
openssl.capath to the directory containing global and (presumably) local certificates. If you set a single cafile instead only that will be used for all socket connections.– mario
Nov 17 '18 at 13:55
You'd normally set
openssl.capath to the directory containing global and (presumably) local certificates. If you set a single cafile instead only that will be used for all socket connections.– mario
Nov 17 '18 at 13:55
Hi @mario , I do not know how to solve this issue. If i remove the openssl.cafile mail stop to work but i resolve composer SSL issue, if I keep i will have mail working but composer unable to work with SSL issue.
– PeopleInside
Nov 17 '18 at 15:14
Hi @mario , I do not know how to solve this issue. If i remove the openssl.cafile mail stop to work but i resolve composer SSL issue, if I keep i will have mail working but composer unable to work with SSL issue.
– PeopleInside
Nov 17 '18 at 15:14
You already mentioned that. How about answering the
capth question or your /etc/ssl/certs` setup? See also How do you add a certificate authority (CA) to Ubuntu?– mario
Nov 17 '18 at 15:24
You already mentioned that. How about answering the
capth question or your /etc/ssl/certs` setup? See also How do you add a certificate authority (CA) to Ubuntu?– mario
Nov 17 '18 at 15:24
Hi @mario , thanks for the answer. I try to replace cafile with capath tried to set the path to /etc/ssl/certs but email stop to work. Inside i see some symbolic links to some ca-boundle.crt - never idea on what to do. I am just understand since i add the cafile to point to my domain certificate this works for emails but not for the server so mail is working and using the right certificate, if i remove this composer will use maybe a trust server certificate that i do not know where is but not works for email. Maybe in my domain certificate i need include something else... never idea.
– PeopleInside
Nov 17 '18 at 17:27
Hi @mario , thanks for the answer. I try to replace cafile with capath tried to set the path to /etc/ssl/certs but email stop to work. Inside i see some symbolic links to some ca-boundle.crt - never idea on what to do. I am just understand since i add the cafile to point to my domain certificate this works for emails but not for the server so mail is working and using the right certificate, if i remove this composer will use maybe a trust server certificate that i do not know where is but not works for email. Maybe in my domain certificate i need include something else... never idea.
– PeopleInside
Nov 17 '18 at 17:27
add a comment |
1 Answer
1
active
oldest
votes
0
Solved https://github.com/composer/composer/issues/7797#issuecomment-440680491
In centos the position seems to be little bit different How to add Certificate Authority in centos7?
I found it on etc/pki/ca-trust/extracted/openssl
answered Nov 21 '18 at 14:36
PeopleInsidePeopleInside
1710
add a comment |
Your Answer
StackExchange.ifUsing("editor", function () {
StackExchange.using("externalEditor", function () {
StackExchange.using("snippets", function () {
StackExchange.snippets.init();
});
});
}, "code-snippets");
StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "1"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});
function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});
}
});
draft saved
draft discarded
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53351687%2fphp-7-1-issue-with-mail-openssl-certificate%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
1 Answer
1
active
oldest
votes
1 Answer
1
active
oldest
votes
active
oldest
votes
active
oldest
votes
0
Solved https://github.com/composer/composer/issues/7797#issuecomment-440680491
In centos the position seems to be little bit different How to add Certificate Authority in centos7?
I found it on etc/pki/ca-trust/extracted/openssl
answered Nov 21 '18 at 14:36
PeopleInsidePeopleInside
1710
add a comment |
0
Solved https://github.com/composer/composer/issues/7797#issuecomment-440680491
In centos the position seems to be little bit different How to add Certificate Authority in centos7?
I found it on etc/pki/ca-trust/extracted/openssl
answered Nov 21 '18 at 14:36
PeopleInsidePeopleInside
1710
add a comment |
0
0
0
Solved https://github.com/composer/composer/issues/7797#issuecomment-440680491
In centos the position seems to be little bit different How to add Certificate Authority in centos7?
I found it on etc/pki/ca-trust/extracted/openssl
answered Nov 21 '18 at 14:36
PeopleInsidePeopleInside
1710
Solved https://github.com/composer/composer/issues/7797#issuecomment-440680491
In centos the position seems to be little bit different How to add Certificate Authority in centos7?
I found it on etc/pki/ca-trust/extracted/openssl
answered Nov 21 '18 at 14:36
PeopleInsidePeopleInside
1710
answered Nov 21 '18 at 14:36
PeopleInsidePeopleInside
1710
answered Nov 21 '18 at 14:36
PeopleInsidePeopleInside
1710
answered Nov 21 '18 at 14:36
PeopleInsidePeopleInside
1710
1710
add a comment |
add a comment |
draft saved
draft discarded
Thanks for contributing an answer to Stack Overflow!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
draft saved
draft discarded
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53351687%2fphp-7-1-issue-with-mail-openssl-certificate%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
You'd normally set
openssl.capathto the directory containing global and (presumably) local certificates. If you set a singlecafileinstead only that will be used for all socket connections.– mario
Nov 17 '18 at 13:55
Hi @mario , I do not know how to solve this issue. If i remove the openssl.cafile mail stop to work but i resolve composer SSL issue, if I keep i will have mail working but composer unable to work with SSL issue.
– PeopleInside
Nov 17 '18 at 15:14
You already mentioned that. How about answering the
capthquestion or your /etc/ssl/certs` setup? See also How do you add a certificate authority (CA) to Ubuntu?– mario
Nov 17 '18 at 15:24
Hi @mario , thanks for the answer. I try to replace cafile with capath tried to set the path to /etc/ssl/certs but email stop to work. Inside i see some symbolic links to some ca-boundle.crt - never idea on what to do. I am just understand since i add the cafile to point to my domain certificate this works for emails but not for the server so mail is working and using the right certificate, if i remove this composer will use maybe a trust server certificate that i do not know where is but not works for email. Maybe in my domain certificate i need include something else... never idea.
– PeopleInside
Nov 17 '18 at 17:27