These forums have been archived and are now read-only.

The new forums are live and can be found at https://forums.eveonline.com/

EVE Technology Lab

 
  • Topic is locked indefinitely.
 

Certificate change on api.eveonline.com?
Author
Previous Topic Next Topic
Messenger Of Truth
Butlerian Crusade
#1 - 2016-01-21 15:44:07 UTC
I'm getting certificate verification errors with api.eveonline from a linux machine... has something changed on my machine or has something changed on the server?

The problem is best demonstrated by


$ curl https://api.eveonline.com
curl: (60) SSL certificate problem: unable to get local issuer certificate
More details here: http://curl.haxx.se/docs/sslcerts.html

curl performs SSL certificate verification by default, using a "bundle"
 of Certificate Authority (CA) public keys (CA certs). If the default
 bundle file isn't adequate, you can specify an alternate file
 using the --cacert option.
If this HTTPS server uses a certificate signed by a CA represented in
 the bundle, the certificate verification probably failed due to a
 problem with the certificate (it might be expired, or the name might
 not match the domain name in the URL).
If you'd like to turn off curl's verification of the certificate, use
 the -k (or --insecure) option.


$ openssl s_client -showcerts -connect api.eveonline.com:443
CONNECTED(00000003)
depth=2 C = US, O = GeoTrust Inc., CN = GeoTrust Global CA
verify error:num=20:unable to get local issuer certificate
verify return:0

Trade Hub Price Checker: stop.hammerti.me.uk/pricecheck

Visit "Haulers Channel" in game for all matters courier-related.

Structure name/system API: stop.hammerti.me.uk/api
Messenger Of Truth
Butlerian Crusade
#2 - 2016-01-21 15:58:42 UTC
How weird - on two different machines it didn't work, and now it works on both machines again!

Trade Hub Price Checker: stop.hammerti.me.uk/pricecheck

Visit "Haulers Channel" in game for all matters courier-related.

Structure name/system API: stop.hammerti.me.uk/api
Louis Vitton
Viziam
Amarr Empire
#3 - 2016-01-21 22:59:31 UTC
With php and curl i disable the ssl checks cause it can cause issues.

curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 0);
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0);
Dragonaire
Here there be Dragons
#4 - 2016-01-23 04:54:18 UTC
You should never disable cert checks unless you really like letting everyone just have full access to your account via man-in-the-middle attacks Blink It's easier to just post all of your account sign-in info on the forums you know? Always amazes me how when people may very well be experiencing one of these attacks the first thing they do is turn off the warning and ignore the problem and continue to allow it to go on because they can Lol

Finds camping stations from the inside much easier. Designer of Yapeal for the Eve API. Check out the Yapeal PHP API Library thread.