This repository has been archived by the owner on Nov 3, 2023. It is now read-only.
cURL unable to establish a secure connection to contao.org #8614
Labels
Comments
|
Our servers "understand" TLSv1.1, so this might not be the problem. |
|
Both the Live Update and the ER2 are not using cURL but our own // Request.php line 284
$fp = @fsockopen('sslv3://' . $uri['host'], $port, $errno, $errstr, 15);(I have changed |
|
I don't have a reproduction at hand myself, however I'll relay that change to the forum and report back here. |
|
ER and Live-Update are not working. Got serveral error messages with the Contao check. See: https://community.contao.org/de/showthread.php?54200-LU-funktioniert-nicht-mehr-mit-PHP-5-6&p=429103&viewfull=1#post429103 |
|
The Contao check uses cURL and is thus not suited to test the |
|
@FreiWild You could test the changes in the Contao Check as well though. Simply replace any occurences of |
|
Oh yes, you are right! There is an https://github.com/contao/check/blob/master/check/controller/installer.php#L106 |
|
Full error messages: @leofeyer regarding SOAP: the ciphers mentioned here contao/check#109 (comment) could be added as a context. See http://stackoverflow.com/a/23130512/374996 for example. Not sure if that's the right thing to do. |
|
So change the 106 line to: |
Yes. |
|
Same. |
|
@FreiWild: replace these lines $this->client = new SoapClient($wsdl, array(
'soap_version' => SOAP_1_2,
'compression' => SOAP_COMPRESSION_ACCEPT | SOAP_COMPRESSION_FIXED | 1
));with $this->client = new SoapClient($wsdl, array(
'soap_version' => SOAP_1_2,
'compression' => SOAP_COMPRESSION_ACCEPT | SOAP_COMPRESSION_FIXED | 1,
'stream_context' => stream_context_create(
[
'ssl' => [
'ciphers' => 'ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:AES256-GCM-SHA384:AES256-SHA256:AES256-SHA:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:AES128-GCM-SHA256:AES128-SHA256:AES128-SHA:ECDHE-RSA-DES-CBC3-SHA:DES-CBC3-SHA'
]
]
)
));and access the Extension Repository again in the back end. |
|
You can also try $this->client = new SoapClient($wsdl, array(
'soap_version' => SOAP_1_2,
'compression' => SOAP_COMPRESSION_ACCEPT | SOAP_COMPRESSION_FIXED | 1,
'stream_context' => stream_context_create(
[
'ssl' => [
'crypto_method' => STREAM_CRYPTO_METHOD_SSLv3_CLIENT
]
]
)
));if you have PHP 5.6+ |
|
No Change. Error Log: |
|
@fritzmg Same. Still not working. |
|
And finally try $this->client = new SoapClient($wsdl, array(
'soap_version' => SOAP_1_2,
'compression' => SOAP_COMPRESSION_ACCEPT | SOAP_COMPRESSION_FIXED | 1,
'stream_context' => stream_context_create(
[
'ssl' => [
'ciphers' => 'ECDHE-RSA-AES256-SHA:AES256-SHA:ECDHE-RSA-AES128-SHA:AES128-SHA:CDHE-RSA-DES-CBC3-SHA:DES-CBC3-SHA'
]
]
)
)); |
|
:( Same. |
|
Btw. you should use |
|
|
|
What is the status of this ticket? |
|
imho it can be closed. Hopefully all hosters have updated their outdated OpenSSL versions. |
Sign up for free
to subscribe to this conversation on GitHub.
Already have an account?
Sign in.
There are more and more reports in the community forum about users not being able to use the Live-Update or Extension Repository anymore (or in a fresh install) due to the following OpenSSL error:
As far as I researched, the error only happens in certain combinations of OpenSSL and cURL versions - also depending on the used Linux distribution for example. One post suggests the following:
I am sure this is otherwise simply caused by an improperly configured server environment - but is there anything that can be done on the server side of contao.org - or is there any specific advice that can be relayed to hosters so that it can be fixed? (Many hosters are often reluctant to admit failure...)
The text was updated successfully, but these errors were encountered: