Solution : Curl webservice CURLE_SSL_CACERT (60) Peer certificate cannot be authenticated with known CA certificates.

Posted by: 
Dominique De Cooman

I was trying to post to a webservice and was getting the 60 error code: Peer certificate cannot be authenticated with known CA certificates. .
The webservice I was trying to reach was over https.
The solution is very simple.
You need to set curl not to verify the ssl peer. You can do this by setting an option.

curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);

The complete code to do a curl request:

<?php
  $ch 
curl_init();

  
curl_setopt($ch,CURLOPT_URL,$url);
  
curl_setopt($ch,CURLOPT_POST,count($fields));
  
curl_setopt($ch,CURLOPT_POSTFIELDS,$string);
  
curl_setopt ($ch,CURLOPT_RETURNTRANSFER );
  
curl_setopt($chCURLOPT_SSL_VERIFYPEERfalse);

  
$result curl_exec($ch);

  
curl_close($ch);
?>

To check the error codes use :

<?php
//gives the error code <a href="http://www.php.net/manual/en/function.curl-error.php
curl_error">http://www.php.net/manual/en/function.curl-error.php
curl_error</a>(
$ch);

//or the code, usefull to let the script react on different codes
//<a href="
http://www.php.net/manual/en/function.curl-errno.php
curl_errno">http://www.php.net/manual/en/function.curl-errno.php
curl_errno</a>(
$ch);

//Gives the info about your latest request
curl_getinfo(
$ch);
?>

EDIT

Allways check your SSL version. You can set it like this.

<?php
curl_setopt
($chCURLOPT_SSLVERSION3);
?>

For more http://www.php.net/manual/en/function.curl-setopt.php

Comments

Solution : Curl webservice CURLE_SSL_CACERT (60) Peer certificate cannot be authenticated with known CA certificates.

Thanks for the good explanation. Helped out a lot: Curl Error messages are sometimes impossible to decipher.

Add new comment