cURL error 60: SSL certificate problem: unable to get local issuer certificate

[ArgaWoW]

No, I still can't install apps in Owncloud. I got: An error occurred while trying app activation. I have posted this in the owncloud forum and they can't solve my problem. Don't know what to do kow..... :(

Gesendet von meinem SM-G900F mit Tapatalk

 

[Joshua Parker Ruehlig]

No, I still can't install apps in Owncloud. I got: An error occurred while trying app activation. I have posted this in the owncloud forum and they can't solve my problem. Don't know what to do kow..... :(

Gesendet von meinem SM-G900F mit Tapatalk

You could always just upload apps directly to /usr/local/www/owncloud/apps then try enabling it.
Not sure why updating curl didn't work for you as it worked for several others in the how-to thread you linked.

 

[ArgaWoW]

I try this too. And it don't work. I have to move my jails to another pool so I have setup oc from scratch. Perhaps this will work then. I will report if so....

Gesendet von meinem SM-G900F mit Tapatalk

 

[DrKK]

I stopped running Owncloud yesterday, on account of the massive divergence and difficulty of use now as of the latest version. I don't if I should blame the ports maintainer, or the Owncloud people themselves, but the effort required now to resolve all of the challenges and errors exceeded its utility for me, so DrKK is now OwnCloud free.

 

[Handle]

This is discussed from this post on
https://forums.freenas.org/index.ph...x-php-fpm-and-mysql.17786/page-26#post-221631
I'll summarize the steps. Please tell me if this works for you as I'd be interested in having a well documented fix.

• Add 'WITH_OPENSSL_PORT=yes' to /etc/make.conf

Code:

service php-fpm stop
pkg delete -f php56 php56-curl curl
pkg upgrade openssl
make config -C /usr/ports/ftp/curl # disable GSSAPI_BASE, enable GSSAPI_NONE
make install clean -C /usr/ports/ftp/php56-curl
service php-fpm start

No, I still can't install apps in Owncloud. I got: An error occurred while trying app activation. I have posted this in the owncloud forum and they can't solve my problem. Don't know what to do kow..... :(

Gesendet von meinem SM-G900F mit Tapatalk

I found the solution. After nearly giving up I ran "php -i | grep curl -A 30" and saw that php56 was compiled against the old version of openssl provided by the system, even though I added "WITH_OPENSSL_PORT=yes" to /etc/make.conf. I fixed that by adding "--with-openssl=/usr/local" to the configure parameters in the makefile (/usr/ports/lang/php56/Makefile) and a dash to the line above:

Code:

CONFIGURE_ARGS+=--with-layout=GNU \
                --localstatedir=/var \
                --with-config-file-scan-dir=${PREFIX}/etc/php \
                --disable-all \
                --enable-libxml \
                --enable-mysqlnd \
                --with-libxml-dir=${LOCALBASE} \
                --with-pcre-regex=${LOCALBASE} \
                --with-zlib-dir=/usr \
                --program-prefix="" \
                --with-openssl=/usr/local

There may be other ways to get php56 to use the openssl version from ports, I'm not very experienced regarding that. After that you need to remove the line "extension=openssl.so" from /usr/local/etc/php/extensions.ini because now the openssl support is compiled directly into php rather than provided as an extension.
Maybe there is a way to just exchange the openssl.so against one that was compiled with the newest version of openssl?
Anyways, I'm very happy that I found the solution, I hope it helps others too.

 

[Joshua Parker Ruehlig]

I found the solution. After nearly giving up I ran "php -i | grep curl -A 30" and saw that php56 was compiled against the old version of openssl provided by the system, even though I added "WITH_OPENSSL_PORT=yes" to /etc/make.conf. I fixed that by adding "--with-openssl=/usr/local" to the configure parameters in the makefile (/usr/ports/lang/php56/Makefile) and a dash to the line above:

Code:

CONFIGURE_ARGS+=--with-layout=GNU \
                --localstatedir=/var \
                --with-config-file-scan-dir=${PREFIX}/etc/php \
                --disable-all \
                --enable-libxml \
                --enable-mysqlnd \
                --with-libxml-dir=${LOCALBASE} \
                --with-pcre-regex=${LOCALBASE} \
                --with-zlib-dir=/usr \
                --program-prefix="" \
                --with-openssl=/usr/local

There may be other ways to get php56 to use the openssl version from ports, I'm not very experienced regarding that. After that you need to remove the line "extension=openssl.so" from /usr/local/etc/php/extensions.ini because now the openssl support is compiled directly into php rather than provided as an extension.
Maybe there is a way to just exchange the openssl.so against one that was compiled with the newest version of openssl?
Anyways, I'm very happy that I found the solution, I hope it helps others too.

glad you got it working. after I posted those steps someone in the thread figured out the specific package that needs to be recompiled is php-openssl. so the steps I posted are almost right, just also delete php56-openssl first.

 

[Handle]

I didn't see that, it's probably a few pages later. Could you add that to your tutorial? Because everyone will run into the curl 60 error if it runs in a FreeNAS-Jail.

 

[Joshua Parker Ruehlig]

I didn't see that, it's probably a few pages later. Could you add that to your tutorial? Because everyone will run into the curl 60 error if it runs in a FreeNAS-Jail.

I just updated the guide.

 

[Handle]

I don't know why but without my modified Makefile for php56 I still end up with the OpenSSL-version of the jail, not the one from ports. I compiled and installed php56, php56-curl and php56-openssl but "php -i" still shows the old version when I search for "curl". I'm sticking with my php56 with built-in OpenSSL support.