1. Public forum
  2. General questions
0
Answered

cURL error 60

Qing L 3 years ago • updated by Vlad R 10 months ago • 13

Error: Connection error: Error: cURL error 60: SSL certificate problem: certificate has expired (see https://curl.haxx.se/libcurl/c/libcurl-errors.html)

What this mean?

Answer

Answer
Answered
Vlad R 3 years ago
  1. Download "cacert.pem" from here: https://curl.haxx.se/docs/caextract.html
  2. Save the cacert.pem file anywhere on your system.
  3. Open your php.ini file. If your php.ini file doesn't have the curl.cainfo line, just add it to the end of the file, then add the file path where you saved your cacert.pem file:
    Change:
    ; curl.cainfo =
    To (adjust with your own path):
    curl.cainfo = "C:\PHP\Extras\SSL\cacert.pem"
  4. Restart your server.
Answer
Answered
Vlad R 3 years ago
  1. Download "cacert.pem" from here: https://curl.haxx.se/docs/caextract.html
  2. Save the cacert.pem file anywhere on your system.
  3. Open your php.ini file. If your php.ini file doesn't have the curl.cainfo line, just add it to the end of the file, then add the file path where you saved your cacert.pem file:
    Change:
    ; curl.cainfo =
    To (adjust with your own path):
    curl.cainfo = "C:\PHP\Extras\SSL\cacert.pem"
  4. Restart your server.
Kimmo L 2 years ago

Hi

I have faced that same situation while I was deploying test server for our lab. Downloaded the cert and added that row but still gives error. 

Vlad R 2 years ago

Have you restarted your web server?

Kimmo L 2 years ago

Yep. And it seemed even be that you can define whatever to that row. I tested by lefting intentionally typo cert and it still same gave error like it won't even check cert path. 

Vlad R 2 years ago

Have you confirmed with a <?php phpinfo();?> page that you are editing the right file and that the changes are taking effect?

Kimmo L 2 years ago

My temporary solution was to edit yum.conf with line sslverify=false

Vlad R 2 years ago

We highly recommend that you do not use this solution, because you open your system to vulnerabilities. You should really install and configure cURL with valid CA certificates.

Kimmo L 2 years ago

So solution is to reinstall cURL? I am assuming that it is already installed. 

Vlad R 2 years ago

The solution is still to configure PHP with a file CA cert file, as mentioned in the post marked as answer. I see you have an Enterprise FileRun license, do contact us via e-mail and I can help you configure your server to fix this problem.

Kimmo L 2 years ago

Well temp fix is for the test server and I am not about to keep it online all the time. Primary server with Enterprise license is running fine and no vulnerabilities. 

Anonymous 1 year ago
Thank you for this thread !
For an other usage like external api (shorting weblink), the file files/system/classes/vendor/GuzzleHttp/cacert.pem must be updated. (without updating all the filerun soft)
Anonymous 10 months ago
I ran into a similar problem. I've added the path to curl.cainfo in the php.ini (Rocky Linux latest kernel). 
The info.php shows the path to the cacert.pem.

Directive Local Value Master Value
curl.cainfo /path/to-the/cacert.pem /path/to-the/cacert.pem

I've installed ioncube as well, SELinux is activated too. Tried turning off firewall and of course rebooted the whole server/system. Still network error 7

Any idea what I could try next?
Vlad R 10 months ago

Please see: https://docs.filerun.com/php_configuration#httpsssl_support for the location of the SSL bundle file used by newer FileRun versions. Because FileRun gets updates more frequently than PHP, we chose to include with FileRun rather than using the system's default.

Customer support service by UserEcho