MRatWork Forum by Mustafa Ramadhan

Sawo Project - Kloxo-MR Discussions => Kloxo-MR Technical Helps => Topic started by: LotsOfQ on 2017-11-29, 17:40:09

Title: [Solved] cURL error 60: Peer certificate cannot be authenticated...
Post by: LotsOfQ on 2017-11-29, 17:40:09
I'm getting this error from my WordPress.
Quote
cURL error 60: Peer certificate cannot be authenticated with known CA certificates

I'm assuming it has something to do with ssl because websites that don't use https working fine only the ones with https have issues.

Please help.
Title: Re: cURL error 60: Peer certificate cannot be authenticated...
Post by: LotsOfQ on 2017-11-30, 06:00:48
Does anyone else have this issue or am I the only one? Should I run a 'sh /script/upcp -y'?
Title: Re: cURL error 60: Peer certificate cannot be authenticated...
Post by: LotsOfQ on 2017-11-30, 06:03:17
More info that I found people with similar issue asking for support.

Code: [Select]
pretty sure that error whould be a problem with your SSL Certificate itself.  So would need to have your we host check your SSL Certification.

Pretty sure this an issue that only your web host can take core of for you.  ie SSL Cert is not setup correctly, cURL/OpenSSL issue, etc.
Title: Re: cURL error 60: Peer certificate cannot be authenticated...
Post by: Spacedust on 2017-12-03, 18:47:13
See this: https://access.redhat.com/solutions/523823
Title: Re: cURL error 60: Peer certificate cannot be authenticated...
Post by: LotsOfQ on 2017-12-04, 05:11:07
Thank you so much for the help. I feel like I'm one step close to a solution. Again thank you.

I tried to follow the solution but got errors on this step. Any idea what to do?

Code: [Select]
curl -v https://example.com
* About to connect() to example.com port 443 (#0)
*   Trying 133.244.221.21... connected
* Connected to example.com (133.244.221.21) port 443 (#0)
* Initializing NSS with certpath: sql:/etc/pki/nssdb
* NSS error -8018
* Closing connection #0
* Problem with the SSL CA cert (path? access rights?)
curl: (77) Problem with the SSL CA cert (path? access rights?)
Title: Re: cURL error 60: Peer certificate cannot be authenticated...
Post by: Spacedust on 2017-12-04, 23:26:25
Replace example with your own domain.
Title: Re: cURL error 60: Peer certificate cannot be authenticated...
Post by: LotsOfQ on 2017-12-05, 05:49:49
Yes, that's what I did. I used example.com as example but I did replaced it with my real domain and that's the errors I got.

Code: [Select]
curl -v https://mydomain.com
* About to connect() to mydomain.com port 443 (#0)
*   Trying 133.244.221.21... connected
* Connected to mydomin.com (133.244.221.21) port 443 (#0)
* Initializing NSS with certpath: sql:/etc/pki/nssdb
* NSS error -8018
* Closing connection #0
* Problem with the SSL CA cert (path? access rights?)
curl: (77) Problem with the SSL CA cert (path? access rights?)
Title: Re: cURL error 60: Peer certificate cannot be authenticated...
Post by: LotsOfQ on 2017-12-16, 22:15:56
[Solved] I've found the solution and thought to share it if anyone runs into this. I updated curl and it solved. And updating I followed the step here:
https://forum.mratwork.com/kloxo-mr-technical-helps/how-to-upgrade-curl-to-latest-version/msg46811/#msg46811