How to solve cURL error 60: SSL certificate in Laravel 5 while Facebook authentication

Question

Currently, I am doing a project on laravel5.

I use socialize for Facebook authentication,But I got cURL error Mentioned below.

 RequestException in CurlFactory.php line 162:
cURL error 60: SSL certificate problem: unable to get local issuer certificate (see http://curl.haxx.se/libcurl/c/libcurl-errors.html)

I have searched on internet and done following changes but didn't helped

downloaded cart.pem file
set path "curl.cainfo ="C:\xampp\cacert.pem"
also uncomment "extension=php_curl.dll"

My code of in controller

public function fb()  
{
    return Socialize::with('facebook')->redirect();
}
public function cb()    //callback for facebook
{
    $user = Socialize::with('facebook')->user();
    var_dump($user);
}

https://stackoverflow.com/questions/39686341/curl-error-60-ssl-certificate-unable-to-get-local-issuer-certificatetried-ever/44830568#44830568 — tolgatasci, Jul 01 '17 at 13:14

score 22 · Answer 1 · answered Oct 07 '17 at 13:44

22

While on local-host with Laravel you can easily bypass cURL error.

navigate to Client.php file (vendor\guzzlehttp\guzzle\src\Client.php)

Change "verify" to false

$defaults = [
        'allow_redirects' => RedirectMiddleware::$defaultSettings,
        'http_errors'     => true,
        'decode_content'  => true,
        'verify'          => false,
        'cookies'         => false
    ];

answered Oct 07 '17 at 13:44

Olufemi Ayodele

371
2
7

Bad solution. With next composer update changes may be overridden. – Jsowa Nov 27 '20 at 15:12
1

@Tajni you can then go through the hassle of installing certs on localhost! – Olufemi Ayodele Nov 27 '20 at 16:17

score 19 · Accepted Answer · edited Jun 20 '20 at 09:12

19

https://laracasts.com/discuss/channels/general-discussion/curl-error-60-ssl-certificate-problem-unable-to-get-local-issuer-certificate

https://laracasts.com/discuss/channels/general-discussion/curl-error-60-ssl-certificate-problem-unable-to-get-local-issuer-certificate/replies/52954

I just spent a number of hours grappling with this. The correct answer is

"indeed to put the cacert.pem file and amend the php.ini file to match as suggested by Moez above. ..... but I kept on getting CURL error 60's The trick was getting a clean copy of the PEM file! Any method involving windows notepad or other editors corrupts the file and gives the cURL error 60 etc. Finally I found https://gist.github.com/VersatilityWerks/5719158/download and downloaded a tar file with a clean copy of the cacert.pem file ...... it then all worked perfectly."

And since you are working on Windows, this could be the problem.

edited Jun 20 '20 at 09:12

Community

1
1

answered Jun 27 '15 at 02:23

Manan

829
9
10

Where put this .pem file? – Daniel Accorsi Nov 26 '15 at 20:42
@DanielAccorsi you can put it anywhere, but it should be readable to the php interpreter. – Manan Nov 28 '15 at 02:56
In case someone is using Wamp server, the right file is located in: "C:\wamp\bin\apache\apache\bin\php.ini" – georgeos Oct 14 '16 at 23:52
VersatilityWerks no longer exists on github. – Trevor Feb 03 '20 at 05:53

score 5 · Answer 3 · answered Dec 04 '16 at 00:03

5

Windows : php.ini

and worked fine

answered Dec 04 '16 at 00:03

Hashmat Waziri

843
10
10

cURL error 77: error setting certificate verify locations: CAfile: C:\xampp\php\cacert.pem CApath: none (see http://curl.haxx.se/libcurl/c/libcurl-errors.html) – 151291 Aug 09 '17 at 09:36

score 2 · Answer 4 · answered Feb 02 '18 at 19:23

For anyone pulling their hair out saying "I'VE DOWNLOADED A PRISTINE cacert.pem FILE, PUT IT IN THE CORRECT LOCATION, SET curl.cainfo CORRECTLY, AND RESTARTED MY APACHE SERVER BUT IT JUST DOESN'T WORK!?!?"... If you're using php-fpm then service apache2 restart and service apache2 reload will not update the reference and you'll continue to get error 60. If you intentionally point curl.cainfo to a bad path, you will not get the expected error 77 (first clue).

To restart php-fpm and update that reference (without rebooting the whole server), use service php-fpm restart or service php5-fpm restart or service php7-fpm restart or service php7.0-fpm restart, etc, depending on your php version. Hope this helps save someone time.

score 1 · Answer 5 · answered Jul 19 '20 at 10:24

1

After so much of research i found the best solution for this. You just need to make verification false in the vendor/guzzlehttp/guzzle/src/Client.php file .

    $defaults = [
        'allow_redirects' => RedirectMiddleware::$defaultSettings,
        'http_errors'     => true,
        'decode_content'  => true,
        'verify'          => true, // make this false
        'cookies'         => false,
        'idn_conversion'  => true,
    ];

answered Jul 19 '20 at 10:24

user13957542

19
1

1

DO NOT do this in production. Also editing files in vendor is a big mistake. If composer updates that lib any changes you make will be blown out and will then break your code. – Rick Kukiela Sep 24 '20 at 17:02

score 0 · Answer 6 · answered Dec 07 '17 at 01:23

well it may sometimes be confusing. when you check the php.ini file you will see ;curl.cainfo = “certificate path\cacert.pem” you have to note there is a semicolon in front. remove that and all the quotes marks, and simple put the file path to look like this curl.cainfo = C:\xampp\php\extras\ssl\cacert.pem as you can see my cacert.pem is in the path C:\xampp\php\extras\ssl\cacert.pem thats where it should be . save and restart your server.

score 0 · Answer 7 · answered Apr 26 '22 at 01:28

0

You can disable SSL

composer config disable-tls true
composer config secure-http false
composer clearcache

After that execute = composer install

answered Apr 26 '22 at 01:28

Abhishek Goel

16,893
10
83
64

How to solve cURL error 60: SSL certificate in Laravel 5 while Facebook authentication

7 Answers7

Linked