3.7 Search for Plugins in CP gives "unexpected error…"

I’m guessing there is something about the up date that is breaking the OpenSSL Toolkit… I’ve synchronized the repository databases and update the system’s packages (archlinux: pacman -Syu) had to then reboot the server as mysqld crashed… Checked in again with Dion’s plugin and got this simmialr output:

[PASS]: Your WordPress install claims to support HTTPS Connections
[PASS]: Checking that the HTTPS Root Certificate bundle exists and is accessible
[PASS]: cURL is installed and supports SSL communication, cURL Details: version_number=467200; age=3; features=49821; ssl_version_number=0; version=7.33.0; host=armv5tel-unknown-linux-gnueabi; ssl_version=OpenSSL/1.0.1e; libz_version=1.2.8; protocols=dict,file,ftp,ftps,gopher,http,https,imap,imaps,pop3,pop3s,rtsp,scp,sftp,smtp,smtps,telnet,tftp
[FAIL]: OpenSSL is not installed
[PASS]: Checking if stream_socket_client exists
[FAIL]: Checking if openssl_x509_parse exists
[PASS]: Verifying api.www.ads-software.com resolves correctly.
[PASS]: [cURL] Communication with www.ads-software.com suceeded, it took 0.593 seconds
[INFO]: PHP Version: 5.5.5

OpenSSL is installed as apache (and a lot more pkgs) depends on it…
What’s curious is that Dion’s plug in output says “OpenSSL/1.0.1e”, but installed is an updateded version: openssl 1.0.1.e-4?

Hi all, A quick update

https://core.trac.www.ads-software.com/ticket/25716

It looks like cURL 7.31.0 has a bug which means that HTTPS POST’s fail, it should be fixed in 7.32.0.

@michaelctorres: After you updated your packages, did you try installing plugins again? I’m interested in knowing if 7.32.0 actually did fix it or not, as you’re running 7.33.0 now

Since some people are confused over the SSL, there’s 4 possible places you could see OpenSSL and it’s version string, but they’re all different and affect different things:

1. The systems OpenSSL – This is what most applications use, and allows you use use openssl CLI tools
2. Apache will be COMPILED with OpenSSL, it’s version may differ from the below, It allows Apache to SERVE https pages, but does not allow PHP to make outgoing https connections
3. The PHP OpenSSL package – This is what allows PHP scripts to use OpenSSL functions, if you get “[FAIL]: OpenSSL is not installed” then it’s not installed
4. cURL is COMPILED with a specific version of OpenSSL, and that version may be different to the above versions

yes I’ve installed plugins but I’ve still got the downgraded 3.6.1 WordPress installed. I’ve not upgraded again to 3.7.

I couldn’t find any packages matching “PHP OpenSSL” so I’m not sure what’s not installed or how to install it.

Thanks for your assistance Dion it’s much appreciated!

Okay! So I upgraded again 3.7 and everything seems to be working properly in the control panel for plugins. I can search and the links work and can install them in 3.7. Thanks again Dion.

Okay! So I upgraded again 3.7 and everything seems to be working properly in the control panel for plugins. I can search and the links work and can install them in 3.7. Thanks again Dion.

Great! That means the cURL 7.33.0 update fixed it.

I couldn’t find any packages matching “PHP OpenSSL” so I’m not sure what’s not installed or how to install it.

FWIW, the package is usually called ‘php-openssl’ or ‘php55-openssl’ in your systems package manager. Since cURL is compiled with SSL and now works, you don’t need to install it though.

OK. So i have cURL v 7.22 When i try to update curl on my ubuntu box i have the latest version.

What to do?

OK. So i have cURL v 7.22 When i try to update curl on my ubuntu box i have the latest version.

cURL 7.22 is not affected as far as I can tell.
However, your PHP install uses a DIFFERENT curl, usually packaged as php-curl, What version of curl does the testing plugin say you’ve got installed? (see the earlier posts here mentioning https://dd32.id.au/uploads/2013/10/https-debugger.zip )

When running “curl -V” in terminal it says.
phpinfo also says curl 7.22
This is the response from the HTTPS Tester:

[PASS]: Your WordPress install claims to support HTTPS Connections
[PASS]: Checking that the HTTPS Root Certificate bundle exists and is accessible
[PASS]: cURL is installed and supports SSL communication, cURL Details: version_number=464384; age=3; features=50749; ssl_version_number=0; version=7.22.0; host=x86_64-pc-linux-gnu; ssl_version=GnuTLS/2.12.14; libz_version=1.2.3.4; protocols=dict,file,ftp,ftps,gopher,http,https,imap,imaps,ldap,pop3,pop3s,rtmp,rtsp,smtp,smtps,telnet,tftp
[PASS]: OpenSSL is installed. OpenSSL 1.0.1 14 Mar 2012 268439567
[PASS]: Checking if stream_socket_client exists
[PASS]: Checking if openssl_x509_parse exists
[PASS]: Verifying api.www.ads-software.com resolves correctly.
[PASS]: [Streams] Communication with www.ads-software.com suceeded, it took 0.87 seconds
[PASS]: [Streams with a POST body] Communication with www.ads-software.com suceeded, it took 0.859 seconds
[PASS]: [cURL] Communication with www.ads-software.com suceeded, it took 0.908 seconds
[FAIL]: [cURL with a POST body] Communication with www.ads-software.com failed with error: [http_request_failed]: GnuTLS recv error (-9): A TLS packet with unexpected length was received.
[INFO]: PHP Version: 5.3.17

[PASS]: cURL is installed and supports SSL communication, cURL Details: version_number=464384; age=3; features=50749; ssl_version_number=0; version=7.22.0; host=x86_64-pc-linux-gnu; ssl_version=GnuTLS/2.12.14; libz_version=1.2.3.4; protocols=dict,file,ftp,ftps,gopher,http,https,imap,imaps,ldap,pop3,pop3s,rtmp,rtsp,smtp,smtps,telnet,tftp
[FAIL]: [cURL with a POST body] Communication with www.ads-software.com failed with error: [http_request_failed]: GnuTLS recv error (-9): A TLS packet with unexpected length was received.

Thanks for those details, your cURL is compiled with GnuTLS rather than OpenSSL, What version of Ubuntu are you using?
It appears that this is a known Ubuntu bug affecting other applications too.

I am using

Distributor ID:	Ubuntu
Description:	Ubuntu 12.04 LTS
Release:	12.04
Codename:	precise

This should be fixed in WordPress 3.7.1 by falling back to HTTP connections when HTTPS fails.
You can get the latest 3.7 nightly release from https://www.ads-software.com/nightly-builds/wordpress-3.7-latest.zip

Just Update Curl to latest version and problem will be solved

immortal: Just Update Curl to latest version and problem will be solved

No it will not!

Where to put that debugger? In wordpress/ folder?
And then what? I put and opened and got this.
Fatal error: Call to undefined function is_multisite() in /home/kangarooo/domains/latubanka.lv/public_html/blog/https-debugger.php on line 16

This should be fixed in WordPress 3.7.1 by falling back to HTTP connections when HTTPS fails.
You can get the latest 3.7 nightly release from https://www.ads-software.com/nightly-builds/wordpress-3.7-latest.zip

As Dion said.

I’m marking this resolved, since 3.7.1 will fix it (and that’s kinda how we handle things with new revisions – You can use the nightly if you want it now)