How to a specify the correct CA certificate

Hi, can you try to replace turn ‘ssl_verify’ to ‘false’ in wp_cassify_utils.php, in wp_cassify_do_ssl_web_request function :
‘sslverify’ => false

Keep me informed if it solve the problem.

If it’s not work, reinstall the previous version 1.5.6, and then i publish a fix quickly.

Hi, I still seem to be getting the same problem:

Notice: wp_setcookie is deprecated since version 2.5! Use wp_set_auth_cookie() instead. in /var/www/html/wordpress/wp-includes/functions.php on line 3573
Error [ wp_cassify_do_ssl_web_request ] : Peer certificate cannot be authenticated with known CA certificates

I assume your change should just switch the cert verification off, rather like: curl –insecure would do?

I also tried restarting httpd just in case.

Thanks

Ok, thanks for stacktrace.

Ok, patch the function like this while new version of plugin are being released :

public static function wp_cassify_do_ssl_web_request( $url, $ssl_cipher ) {

if (! function_exists ( ‘curl_init’ ) ) {
die( ‘Please install php cURL library !’);
}

$ch = curl_init();

curl_setopt( $ch, CURLOPT_HEADER, false );
curl_setopt( $ch, CURLOPT_URL, $url ) ;
curl_setopt( $ch, CURLOPT_RETURNTRANSFER, 1 );
curl_setopt( $ch, CURLOPT_SSL_VERIFYHOST, 2);
curl_setopt( $ch, CURLOPT_SSL_VERIFYPEER, 1);

//curl_setopt( $ch, CURLOPT_USERAGENT,’Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.13) Gecko/20080311 Firefox/2.0.0.13′ );
curl_setopt( $ch, CURLOPT_SSLVERSION, 0 );

if ( ( defined( ‘WP_DEBUG’ ) ) && ( WP_DEBUG == true ) ) {
curl_setopt( $ch, CURLOPT_VERBOSE, true );
}

$response = curl_exec( $ch );

if( curl_errno( $ch ) ) {
if ( ( defined( ‘WP_DEBUG’ ) ) && ( WP_DEBUG == true ) ) {
$info = curl_getinfo( $ch );
die( ‘Curl error: ‘ . curl_error( $ch ) . print_r( $info, TRUE ) );
}
else {
die( ‘Curl error: active WP_DEBUG in wp-config.php’);
}
}

curl_close( $ch );

return $response;
}

Hi, Ok that works. I’ll look out for an update. While I was looking for an answer on the net someone said that WP have not provided a method to set the CA cert. Not sure that I believe that….

Thanks very much for your help.

Ok, I close the ticket.

I will rewrite new plugin version as the previous version using php-cURL functions. So we will have more control on SSL webrequest configuration.
Originally, i replaced php-cURL functions by native WordPress function wp_remote_get to delete plugin php5-curl dependency. But, it’s not a good idea.

So, I back off.

Best regards.

Ok, I close the ticket.