Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

SSL certificate problem: unable to get local issuer certificate, must set CURLOPT_SSL_VERIFYPEER=0 #122

Open
ortreum opened this issue Dec 20, 2018 · 2 comments

Comments

@ortreum
Copy link

ortreum commented Dec 20, 2018

I can only connect with:

    curl_setopt($this->curlHandle, CURLOPT_SSL_VERIFYPEER, 0);

Without it I got this message:

    Failed connection to https://hbci11.fiducia.de/cgi-bin/hbciservlet: SSL certificate problem: unable to get local issuer certificate

You should add an SSLType parameter or set this line 0. Some might only allow connections via TLS 1.2.

Thx

@AlexH-HankIT
Copy link
Contributor

This library should promote security by design, therefor disabling the certification verification or even making it possible to disable it is a very bad idea imho.

Which OS do you run? Your problem is most likely related to a missing certificate store. I'm not sure why you mentioned TLS 1.2.

@ortreum
Copy link
Author

ortreum commented Dec 20, 2018

Ok you are right. Windows itself was the problem and still is. But on Linux it is working as it should.

SSL1 is not a good idea anymore imho too. See poodle and heart bleed attacks,

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants