EVE Technology Lab

Hi there,

I've been using the SSO for a few months now to authenticate people accessing my tool. The code I've used is pretty straight-forward and mosly scavenged from Steve's example. It was working well.

A few hours ago I've started seeing this problem when calling the callback function for the SSO authentication:
SSL certificate problem: unable to get local issuer certificate

This is the code that produces the error:

    //Do the initial check.
    $header='Authorization: Basic '.base64_encode($client_id.':'.$secret);
    $fields_string='';
    $fields=array(
                'grant_type' => 'authorization_code',
                'code' => $code
            );
    foreach ($fields as $key => $value) {
        $fields_string .= $key.'='.$value.'&';
    }
    $fields_string = rtrim($fields_string, '&');
    $ch = curl_init();
    curl_setopt($ch, CURLOPT_URL, $token_url);
    curl_setopt($ch, CURLOPT_USERAGENT, $useragent);
    curl_setopt($ch, CURLOPT_HTTPHEADER, array($header));
    curl_setopt($ch, CURLOPT_POST, count($fields));
    curl_setopt($ch, CURLOPT_POSTFIELDS, $fields_string);
    curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
    curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, true);
    curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 2);
    // While using this is optional, it may be required if you encounter
    // the "SSL certificate problem: unable to get local issuer certificate"
    // error when calling the API using curl.
    //curl_setopt( $ch, CURLOPT_SSL_VERIFYPEER, false );

    $result = curl_exec($ch);

    if ($result===false) {
        auth_error(curl_error($ch));
    }

I've tried setting CURLOPT_SSL_VERIFYPEER to false, but even that produces the same error. Has something changed on the SSO side to suddenly cause this?

I'm seeing this quite consistently.

When checking this on my local server, it works well. It used to work well on my hosting service as well. Up until a few hours ago.

TQ



Not very familiar with this. What specifically do I need to check?

Try setting this in amongst the other curl_setopts

curl_setopt($ch, CURLOPT_CAINFO, dirname(__FILE__) . '/cacert.pem');

and having this file in the same directory. (or have it elsewhere, and update the path.
http://curl.haxx.se/ca/cacert.pem