I'm using DDEV to run a local API, which leverages mkcert (<a href="https://mkcert.org

<a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/us

Okay here's the root of the error: <div cl

Certificates using mkcet fail handshake about socket HOT 4 CLOSED

mglaman commented on June 1, 2024

Certificates using mkcet fail handshake

from socket.

Comments (4)

clue commented on June 1, 2024 1

@mglaman Happy to hear you've got this solved already!

In case somebody else stumbles upon the same problem, can you share a short snippet of how you've updated the "openssl.capath to include the mkcert CAROOT"?

from socket.

mglaman commented on June 1, 2024 1

Ah, yes! Forgot to post the fix here.

Here's the command I used for macOS, because Homebrew installs a second version of OpenSSL it's downloaded packages use

mkdir /usr/local/etc/[email protected]/certs
ln -s "$(mkcert -CAROOT)/rootCA.pem"  /usr/local/etc/[email protected]/certs

You just need to symlink the rootCA.pem to the capath.

I did a more lengthy write up here: https://mglaman.dev/blog/php-sockets-fix-unable-complete-tls-handshake-mkcert-local-development-certificates

from socket.

mglaman commented on June 1, 2024

Okay here's the root of the error:

socket/src/SecureConnector.php

Line 59 in 284d72d

 return $promise = $encryption->enable($connection)->then(null, function ($error) use ($connection, $uri) { 

            // try to enable encryption
            return $promise = $encryption->enable($connection)->then(null, function ($error) use ($connection, $uri) {
                // establishing encryption failed => close invalid connection and return error
                $connection->close();

                throw new \RuntimeException(
                    'Connection to ' . $uri . ' failed during TLS handshake: ' . $error->getMessage(),
                    $error->getCode()
                );
            });

from socket.

mglaman commented on June 1, 2024

I had to update openssl.capath to include the mkcert CAROOT

from socket.

Recommend Projects