curl / Mailing Lists / curl-library / Single Mail

curl-library

Re: PHP HTTPS Proxy

From: Patrick Monnerat <patrick_at_monnerat.net>
Date: Fri, 10 Feb 2017 01:09:11 +0100

On 02/09/2017 10:22 PM, beshoo wrote:
>
> * SSL certificate problem: unable to get local issuer certificate
>
In addition to Daniel's and Ray's remarks, your proxy server probably
uses a server certificate that is signed by a CA not in your trust
bundle file: maybe a self-signed certificate ?
Setting CURLOPT_PROXY_SSL_VERIFYHOST and CURLOPT_PROXY_SSL_VERIFYPEER to
false should probably make it work, but as both Ray and Daniel wrote:
this is a very bad idea.
The correct solution to this is to provide the proper CA in the trust
bundle file (maybe use CURLOPT_PROXY_CAINFO).

Patrick
-------------------------------------------------------------------
Unsubscribe: https://cool.haxx.se/list/listinfo/curl-library
Etiquette: https://curl.haxx.se/mail/etiquette.html
Received on 2017-02-10