Sunday, March 22, 2015

Re: HttpClient SSL error

Server probably disabled SSLv3. You could try to explicitly connect using TLS if that's the case.

There's an article that describes how it's done (see link below), but it needs some work. Basically, you need to specify the ciphers you need to use, and pass those as options to CakePHP3's Http/Client class constructor. These options will then be used by stream_context_create() when you make the actual call.

http://stackoverflow.com/a/23130512

On Sunday, March 22, 2015 at 8:40:19 PM UTC+8, Sven Mäurer wrote:
I have my Http Client configured in a way that I would say it doesn't care about ssl certificates but still get the following error.

$this->http = new Client([
            'host' => $this->base_url . 'api',
            'scheme' => 'https',
            'type' => 'json',
            'timeout' => 5,
            'ssl_verify_peer' => FALSE,
            'ssl_verify_host ' => FALSE
]);

fopen(): SSL operation failed with code 1. OpenSSL Error messages: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed fopen(): Failed to enable crypto fopen(https://104.167.116.87/api-token-auth/): failed to open stream: operation failed

--
Like Us on FaceBook https://www.facebook.com/CakePHP
Find us on Twitter http://twitter.com/CakePHP

---
You received this message because you are subscribed to the Google Groups "CakePHP" group.
To unsubscribe from this group and stop receiving emails from it, send an email to cake-php+unsubscribe@googlegroups.com.
To post to this group, send email to cake-php@googlegroups.com.
Visit this group at http://groups.google.com/group/cake-php.
For more options, visit https://groups.google.com/d/optout.

No comments: