Solution : Curl webservice CURLE_SSL_CACERT (60) Peer certificate cannot be authenticated with known CA certificates.

Posted by:

Dominique De Cooman

On:

Tuesday, July 21, 2009 - 22:58

I was trying to post to a webservice and was getting the 60 error code: Peer certificate cannot be authenticated with known CA certificates. .
The webservice I was trying to reach was over https.
The solution is very simple.
You need to set curl not to verify the ssl peer. You can do this by setting an option.

curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);

The complete code to do a curl request:

<?php
  $ch = curl_init();

  curl_setopt($ch,CURLOPT_URL,$url);
  curl_setopt($ch,CURLOPT_POST,count($fields));
  curl_setopt($ch,CURLOPT_POSTFIELDS,$string);
  curl_setopt ($ch,CURLOPT_RETURNTRANSFER , 1 );
  curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);

  $result = curl_exec($ch);

  curl_close($ch);
?>

To check the error codes use :

<?php
//gives the error code <a href="http://www.php.net/manual/en/function.curl-error.php
curl_error">http://www.php.net/manual/en/function.curl-error.php
curl_error</a>($ch);

//or the code, usefull to let the script react on different codes
//<a href="http://www.php.net/manual/en/function.curl-errno.php
curl_errno">http://www.php.net/manual/en/function.curl-errno.php
curl_errno</a>($ch);

//Gives the info about your latest request
curl_getinfo($ch);
?>

EDIT

Allways check your SSL version. You can set it like this.

<?php
curl_setopt($ch, CURLOPT_SSLVERSION, 3);
?>

For more http://www.php.net/manual/en/function.curl-setopt.php

Comments