Back to Social Directory API Forum
0

CURL ERROR

I have the curl dll's loaded in my system folder, I have the yahoo inc and other php files from the lib in an includes folder in the php
but when I run the test page an error shows up on

ERROR- error making libcurl request(https://api.login.yahoo.com/oauth/v2/get_request_token):SSL certificate problem, verify that the CA cert is OK. Details: error:14090086:SSL routines: SSL3_GET_SERVER_CERTIFICATE: certificate verify failed ERROR- OAuth call to get request token failed ERROR- Failed to create request token PHP Fatal error: Call to a eber function getSessionedUser() on a non-object in C:\server\test2.php on line 30


I thought this would be simple once I got my server running and installed php. I have a question, are the mysql or the sql modules for php needed for this to work?

by
Report Abuse
12 Replies
  • This error means there was a problem with the SSL certificate while making the request. I'll see what I can do to investigate at this end.

    It would help if you knew what version of Curl you are running and what Certificate authorities it recognizes.

    Thanks,

    Tom
    Yahoo! Developer Network
    Report Abuse
    0
  • QUOTE (sh1mmer @ Jan 8 2009, 09:52 AM) <{POST_SNAPBACK}>
    This error means there was a problem with the SSL certificate while making the request. I'll see what I can do to investigate at this end.

    It would help if you knew what version of Curl you are running and what Certificate authorities it recognizes.

    Thanks,

    Tom
    Yahoo! Developer Network


    I don't know the version of Curl but it is the Curl module in PHP 5.2.8.
    this is from the PHP site

    PHP supports libcurl, a library created by Daniel Stenberg, that allows you to connect and communicate to many different types of servers with many different types of protocols. libcurl currently supports the http, https, ftp, gopher, telnet, dict, file, and ldap protocols. libcurl also supports HTTPS certificates, HTTP POST, HTTP PUT, FTP uploading (this can also be done with PHP's ftp extension), HTTP form based upload, proxies, cookies, and user+password authentication.

    I downloaded a curl package from http://curl.haxx.se/ that is version 17.9.2 but did not unpackage it because they say that it is not needed. I will unpackage it and see what happens, hopefully it will work but people the libcurl that you can get from the php installer to get them online so...

    thanks for the reply tom:)
    Report Abuse
    0
  • QUOTE (sh1mmer @ Jan 8 2009, 09:52 AM) <{POST_SNAPBACK}>
    This error means there was a problem with the SSL certificate while making the request. I'll see what I can do to investigate at this end.

    It would help if you knew what version of Curl you are running and what Certificate authorities it recognizes.

    Thanks,

    Tom
    Yahoo! Developer Network

    Okay I downloaded three certificate files just in case either was right
    the first they said on the php site was needed
    cacert.pem
    and the second is
    Equifax%7C_Secure%7C_Global%7C_eBusiness%7C_CA-1.cer
    neither of them worked then I tried
    EquifaxSecureCertificateAuthority.cer

    I put the code to set the path in the yahoo.inc file where the curl instance is made
    Report Abuse
    0
  • QUOTE (sh1mmer @ Jan 8 2009, 09:52 AM) <{POST_SNAPBACK}>
    This error means there was a problem with the SSL certificate while making the request. I'll see what I can do to investigate at this end.

    It would help if you knew what version of Curl you are running and what Certificate authorities it recognizes.

    Thanks,

    Tom
    Yahoo! Developer Network


    The curl I mentioned I wanted to download is for the comman line, i know it is not necessary for certain so I have taken it out.
    I tried another certificate, from this site
    http://www.geotrust.com/resources/root-cer...ates/index.html

    and still no go.
    Report Abuse
    0
  • QUOTE (sh1mmer @ Jan 8 2009, 09:52 AM) <{POST_SNAPBACK}>
    This error means there was a problem with the SSL certificate while making the request. I'll see what I can do to investigate at this end.

    It would help if you knew what version of Curl you are running and what Certificate authorities it recognizes.

    Thanks,

    Tom
    Yahoo! Developer Network


    i put curl_setopt(&ch,CURLOPT_SSL_VERIFYPEER,FALSE); to see if I could dodge it but i get
    and I now receive unknown ssl protocl error in connection to api.login.yahoo.com 443 ERROR
    Report Abuse
    0
  • QUOTE (sh1mmer @ Jan 8 2009, 09:52 AM) <{POST_SNAPBACK}>
    This error means there was a problem with the SSL certificate while making the request. I'll see what I can do to investigate at this end.

    It would help if you knew what version of Curl you are running and what Certificate authorities it recognizes.

    Thanks,

    Tom
    Yahoo! Developer Network


    I recognize now one problem. The most current version of php doesn't come with a certificate bundle on its own or if you unwrap the Curl extension.
    More than that, the curl library that is stated could be added does not come with a certificate.

    I tried certificates that were said to work with yahoo but none of them worked.

    for now, can you, Tom, or perhaps someone else give me a link to the CA certificate that will definitely work to make a secure session with yahoo using the libcurl of php?

    for later
    Is it possible you guys can add a certificate to the php sdk and flash sdk , it would help.
    Report Abuse
    0
  • Hi,

    I've been playing with this and I'm waiting for some more information but I'm not convinced it's purely the CAs on your install.

    Our CA is Equifax though.

    Sorry this taking a while, I'll let you know when I have an update.

    Thanks for your patience.

    Tom
    Report Abuse
    0
  • QUOTE (sh1mmer @ Jan 13 2009, 03:23 PM) <{POST_SNAPBACK}>
    Hi,

    I've been playing with this and I'm waiting for some more information but I'm not convinced it's purely the CAs on your install.

    Our CA is Equifax though.

    Sorry this taking a while, I'll let you know when I have an update.

    Thanks for your patience.

    Tom



    has there been any traction on this issue?
    Report Abuse
    0
  • Our engineers looked at this issue and we couldn't find an issue with the certificates on the Yahoo! machines. It seems like it's an issue with the default CURL install on some client machines. As I stated above making sure you have Equifax as a supported CA should fix the issue.

    Thanks,

    Tom
    Yahoo! Developer Network
    Report Abuse
    0
  • I am also encountering the same issue in my dev box. Please ping me in IM: manmadareddy , I can share my dev box details.
    Report Abuse
    0
  • QUOTE (Manmada Reddy @ Oct 14 2009, 09:36 PM) <{POST_SNAPBACK}>
    I am also encountering the same issue in my dev box. Please ping me in IM: manmadareddy , I can share my dev box details.


    This is an issue on your local dev box, you need to install the ca root certificates or you can use the code below to not validate the certificate.

    CODE
    curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, FALSE);


    You can get the cert here: http://curl.haxx.se/ca/cacert.pem

    Here is a tutorial: http://kb.ucla.edu/articles/how-do-i-updat...url-environment
    Report Abuse
    0
  • I also meet the same problem in SSL certificate
    and i try the different certificate files and I try to print the curl error, show like this

    while using cacert.pem
    Curl error: unable to set private key file: 'C:/Apache/htdocs/yos/lib/ca-bundle.crt' type PEM
    while using equifix
    Curl error: unable to use client certificate (no key found or wrong pass phrase?)

    and i also to add the curl instruction in Yahoo.inc

    $ch = curl_init($requestUrl);

    // ching added start
    //$ca=realpath("Equifax_Secure_Certificate_Authority.crt");
    $ca = 'C:\\Apache\\htdocs\\yos\\lib\\Equifax_Secure_Certificate_Authority.cer';
    curl_setopt ($ch, CURLOPT_SSLCERT, $ca);
    curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, true);
    curl_setopt($ch, CURLOPT_CAINFO, $ca); // Set the location of the CA-bundle

    //curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, FALSE);
    // ching added end

    BUT it still did not work , i really need some help to deal this problem!!
    Report Abuse
    0
Ask a Question

Recent Posts

in Social Directory API