kdyby / curlcabundle Goto Github PK

New "more official" package https://github.com/composer/ca-bundle has been created.

Should this package be deprecated?

This is more info bug than a bug report. If php is compiled with curl based on gnu tls (not open ssl), curl is unable to validate domain name properly. I'm not 100% sure it's the reason, but it's the only difference between many machines and the problematic one.

The error is cURL error 60: server certificate verification failed. CAfile: /home/ubuntu/my-project/vendor/kdyby/curl-ca-bundle/src/ca-bundle.crt CRLfile: none (see http://curl.haxx.se/libcurl/c/libcurl-errors.html)

This buggy version of php/curl is present on Circle CI. I'm just thinking, isn't possible that such version of ssl lib in curl isn't able to read ca-bundler properly?

Hi,

I just discover problem that on windows machines I'm not able to crawl some sites (for example http://ssl.heureka.cz/login-process/). Even when I use CurlCaBundle I still getting error SSL Certificate problem: Unable to get local issuer certificate.

The same domain is used for Heureka Kosik Api and it works ok (on production server).

When I use quite old crt file from http://filehostuk.com/downloads/cacert.rar it works ok (i found it thanx to this post). Do you have any idea why?

• check if there is a newer version of caextract
• upgrade it on the server
• don't forget to fix http -> https in the script