AWS HTTP error: cURL error 60: SSL certificate problem

I had a similar issue while working with Microsoft's Graph product last week. I searched for a big chunk of a full day and I found that I needed to add some certs to my web server and the resolution section title MAMP working solution had enough details for me to solve my problem. I hope that this helps.

https://stackoverflow.com/questions/29822686/curl-error-60-ssl-certificate-unable-to-get-local-issuer-certificate

Thanks Dalma. I tried your post. Pretty similar to all the other ones. I went ahead with it as I thought maybe I was downloading the wrong thing. But that link takes you to the page with past and presents certs. https://curl.haxx.se/docs/caextract.html I placed it in C:\MAMP\bin\php\php7.2.1\extras\ssl\cacert.pem and added to php.ini file in the correct php version folder: curl.cainfo ="C:\MAMP\bin\php\php7.2.1\extras\ssl\cacert.pem"

reboot MAMP server and same thing.

anyone else ran into this issue using Windows 10, and MAMP running PHP 7.2.1. In MAMP 4.1 looks like the following versions are running:

OpenSSL 1.0.1g curl 7.36.0

Thanks!

I run WAMP rather than MAMP and there are two different php.ini files to update. Does MAMP also have this issue?

Dalma,

yes, so in MAMP, there are 2 php.ini files. I tried both, and then each one individually. but no luck on all 3 tries :( here are the file paths to both php.ini files :

MAMP\bin\php\php7.2.1\

MAMP\conf\php7.2.1\

anyone else has any possible solutions dealing with the cURL SSL issue?

I'm sorry but I ran out of ideas.

Thanks Dalma, Totally understand.

@dalma So I finally figured it out. I am using Mamp for Windows 10. So I downloaded the newest CA cert from here: https://curl.haxx.se/docs/caextract.html

Then since MAMP php.ini has the bare minimum setup, I had to add the openssl lines and point the files to my new certificate.

I placed the new certificate in this path: C:\MAMP\bin\php\php7.2.1\extras\ssl\cacert.pem

A lot of the documentation out there states to use this code snippet:

[curl]
; A default value for the CURLOPT_CAINFO option. This is required to be an
; absolute path.
curl.cainfo ="C:\MAMP\bin\php\php7.2.1\extras\ssl\cacert.pem"

but this NEVER worked for me.

After added this code snippet to my version's php.ini file

[openssl]
; The location of a Certificate Authority (CA) file on the local filesystem
; to use when verifying the identity of SSL/TLS peers. Most users should
; not specify a value for this directive as PHP will attempt to use the
; OS-managed cert stores in its absence. If specified, this value may still
; be overridden on a per-stream basis via the "cafile" SSL stream context
; option.
openssl.cafile="C:\MAMP\bin\php\php7.2.1\extras\ssl\cacert.pem"

; If openssl.cafile is not specified or if the CA file is not found, the
; directory pointed to by openssl.capath is searched for a suitable
; certificate. This value must be a correctly hashed certificate directory.
; Most users should not specify a value for this directive as PHP will
; attempt to use the OS-managed cert stores in its absence. If specified,
; this value may still be overridden on a per-stream basis via the "capath"
; SSL stream context option.
openssl.capath="C:\MAMP\bin\php\php7.2.1\extras\ssl\cacert.pem"

and enable module by un-commenting out this line

extension=openssl

It now works from my local. My files are getting pushed over to DO Spaces.

Now I get to fight my production site on Cloudways.

@dxladner You saved the day bro :) Thanks a lot.

Note: I'm also using windows 10, but with WAMP

Great! Thanks a lot, you saved my life DXLADNER! I'm using PHP 7 4 1, Windows and MAMP