Author Topic: certificate error with Bluehost and Authorize.net (Read 4186 times)

thomasat12meter · June 03, 2009, 03:02:23 pm

Hi,
we are using civiCRM 2.2.4 with Drupal 6.11 (update to 6.12 soon) and it is hosted on Bluehost. As a payment processor we are using Authorize.net.

We get the following error when submitting an online contribution payment:
60:SSL certificate problem, verify that the CA cert is OK. Details: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed

We have verified the certificate and Bluehost has reinstalled it and also included "the full ca bundle". But the error persists.
If there is anyone who is using Bluehost and Authorize as well and/or if there is someone who has seen this error before and knows a solution, please let me know.
Any hints or things to consider are of course also highly appreciated.
Thanks! Thomas

Dave Greenberg · June 03, 2009, 03:40:33 pm

Doing a google search on that error gives the impression that this is a Curl config issue on your server:
http://curl.haxx.se/docs/sslcerts.html

... but that's about all i can offer.

Eileen · June 03, 2009, 08:12:36 pm

Try these posts.

There is a script in one of them you can post up to try doing a CURL connection outside of your CMS / CRM - which just allows you to identify if the problem is unrelated to Civi. You can also try commenting the line that does the host verification. I have seen a few problems in this area and suspect in some cases it relates to the certificate store.

http://forum.civicrm.org/index.php/topic,3668.0.html
http://forum.civicrm.org/index.php/topic,6326.msg28287.html#msg28287

thomasat12meter · June 04, 2009, 01:27:41 am

Hi,
thanks for the help and link to the posts. Did not find those with my searches before.
To report back what worked and how it was solved.

I added the code from the link below to civicrm/CRM/Core/Payment/AuthorizeNet.php.
And the comment is correct, setting just curl_setopt($submit, CURLOPT_SSL_VERIFYPEER, FALSE); works.
Btw, also Bluehost came back with the same suggestion. Nice to see the match and that their support came through.

http://forum.civicrm.org/index.php/topic,3668.0.html
--- copied from link above ---
Try adding this after line 99
//turning off the server and peer verification
curl_setopt($submit, CURLOPT_SSL_VERIFYPEER, FALSE);// this one is probably enough
curl_setopt($submit, CURLOPT_SSL_VERIFYHOST, FALSE);
--- end ---

Cheers, Thomas

JoeMurray · December 20, 2012, 03:21:38 pm

I think turning this off is a bit of a security risk.

You probably want to find the root certificate for the domain that your payment processor is posting to, then ensure that curl has that. On my system I needed to add the following:

Code: [Select]

    define ( "MY_CURLOPT_CAPATH", "/etc/ssl/certs/" );  // A directory that holds one or more CA certificates, include a .pem formatted version of the root cert for your payment processor
    curl_setopt($ch, CURLOPT_CAPATH, MY_CURLOPT_CAPATH );

dschafer · December 28, 2012, 08:19:07 am

I recently discovered that this error is generally due to an out of date curl install. Curl has a default CA pack but older versions (7.15 or so) have a severely limited set.

I ran into this trying to install an extension from github.

Info on updating can be found here:
http://www.simplicidade.org/notes/archives/2011/06/github_ssl_ca_errors.html

CiviCRM Community Forums (archive)

News:

Author Topic: certificate error with Bluehost and Authorize.net (Read 4186 times)

thomasat12meter

certificate error with Bluehost and Authorize.net

Dave Greenberg

Re: certificate error with Bluehost and Authorize.net

Eileen

Re: certificate error with Bluehost and Authorize.net

thomasat12meter

Re: certificate error with Bluehost and Authorize.net

JoeMurray

Re: certificate error with Bluehost and Authorize.net

dschafer

Re: certificate error with Bluehost and Authorize.net