SSL certificate problem: unable to get local issuer certificate, must set CURLOPT_SSL_VERIFYPEER=0
Opened this issue · 2 comments
ortreum commented
I can only connect with:
curl_setopt($this->curlHandle, CURLOPT_SSL_VERIFYPEER, 0);
Without it I got this message:
Failed connection to https://hbci11.fiducia.de/cgi-bin/hbciservlet: SSL certificate problem: unable to get local issuer certificate
You should add an SSLType parameter or set this line 0. Some might only allow connections via TLS 1.2.
Thx
AlexH-HankIT commented
This library should promote security by design, therefor disabling the certification verification or even making it possible to disable it is a very bad idea imho.
Which OS do you run? Your problem is most likely related to a missing certificate store. I'm not sure why you mentioned TLS 1.2.
ortreum commented
Ok you are right. Windows itself was the problem and still is. But on Linux it is working as it should.
SSL1 is not a good idea anymore imho too. See poodle and heart bleed attacks,