作曲家要求“包装”引发OpenSSL错误

时间:2018-07-27 08:22:51

标签: php composer-php ssl-certificate packagist

这个问题似乎很普遍,而且我已经处理了很多与此相关的SO帖子,但都无济于事,我快要疯了。奇怪的是,它在数周前运行良好,几个月以来我没有安装任何新东西……

设置:

  • PHP 7.1.9
  • WAMPSERVER 3.1.0
  • APACHE 2.4.27
  • Composer 1.6.5(最新)
  • 我没有代理并且没有防火墙
  • Windows 10

有效方式:

  • 作曲者自我更新

什么不起作用:

  • 安装软件包

  • 我无法使用firefox 61.0.1(64位)访问https://packagist.org/(不安全的连接: MOZILLA_PKIX_ERROR_SELF_SIGNED_CERT

我在作曲家中遇到的错误要求:

[Composer\Downloader\TransportException]
The "https://packagist.org/packages.json" file could not be downloaded: SSL operation failed with code 1. OpenSSL Error messages:
error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed
Failed to enable crypto
failed to open stream: operation failed          

php -r“ var_dump(openssl_get_cert_locations());”返回此:

array(8) {
  ["default_cert_file"]=>
  string(25) "c:/usr/local/ssl/cert.pem"
  ["default_cert_file_env"]=>
  string(13) "SSL_CERT_FILE"
  ["default_cert_dir"]=>
  string(22) "c:/usr/local/ssl/certs"
  ["default_cert_dir_env"]=>
  string(12) "SSL_CERT_DIR"
  ["default_private_dir"]=>
  string(24) "c:/usr/local/ssl/private"
  ["default_default_cert_area"]=>
  string(16) "c:/usr/local/ssl"
  ["ini_cafile"]=>
  string(51) "C:/wamp64/bin/php/php7.1.9/extras/ssl/ca-bundle.crt"
  ["ini_capath"]=>
  string(0) ""
}

我已经下载了ca-bundle.crt并将其添加到我的php.ini文件中:

curl.cainfo=C:/wamp64/bin/php/php7.1.9/extras/ssl/ca-bundle.crt    
openssl.cafile=C:/wamp64/bin/php/php7.1.9/extras/ssl/ca-bundle.crt

作曲家诊断返回以下内容:

Checking composer.json: OK
Checking platform settings: OK
Checking git settings: OK
Checking http connectivity to packagist: WARNING
[Composer\Downloader\TransportException] The "http://packagist.org/packages.json" file could not be downloaded (HTTP/1.1 404 Not Found)
Checking https connectivity to packagist: WARNING
[Composer\Downloader\TransportException] The "https://packagist.org/packages.json" file could not be downloaded: SSL operation failed with code 1. OpenSSL Error messages:
error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed
Failed to enable crypto
failed to open stream: operation failed
Checking github.com rate limit: OK
Checking disk free space: OK
Checking pubkeys: OK
Checking composer version: OK
Composer version: 1.6.5
PHP version: 7.1.9
PHP binary path: C:\wamp64\bin\php\php7.1.9\php.exe

composer show -p -vvv | grep ssl返回以下内容:

Reading ./composer.json
Loading config file ./composer.json
Checked CA file C:\wamp64\bin\php\php7.1.9\extras\ssl\ca-bundle.crt: valid
Executing command (C:\wamp64\www\projectName): git branch --no-color --no-abbrev -v
Failed to initialize global composer: Composer could not find the config file: C:/Users/********/AppData/Roaming/Composer/composer.json
To initialize a project, please create a composer.json file as described in the https://getcomposer.org/ "Getting Started" section
Reading C:\wamp64\www\projectName/vendor/composer/installed.json
Loading plugin PackageVersions\Installer
Loading plugin Symfony\Flex\Flex
Composer >=1.7 not found, downloads will happen in sequence
Running 1.6.5 (2018-05-04 11:44:59) with PHP 7.1.9 on Windows NT / 10.0
ext-openssl         7.1.9    The openssl PHP extension
lib-openssl         1.0.2.11 OpenSSL 1.0.2k  26 Jan 2017

php --ini:

Configuration File (php.ini) Path: C:\WINDOWS
Loaded Configuration File:         C:\wamp64\bin\php\php7.1.9\php.ini
Scan for additional .ini files in: (none)
Additional .ini files parsed:      (none)

编辑1
-尝试清空缓存
-其他网络浏览器(Chrome浏览器,Edge浏览器),但无法正常运行
-同一网络上的另一台计算机->可以运行

编辑2
-创建了一个新的Windows用户,没用

编辑3
-我可以按照 @kallosz
的建议与 https://repo.packagist.org/ 联系 -卷毛给我这个:

curl -vvv https://packagist.org/
*   Trying 144.217.203.53...
* TCP_NODELAY set
* Connected to packagist.org (144.217.203.53) port 443 (#0)
* schannel: SSL/TLS connection with packagist.org port 443 (step 1/3)
* schannel: checking server certificate revocation
* schannel: sending initial handshake data: sending 178 bytes...
* schannel: sent initial handshake data: sent 178 bytes
* schannel: SSL/TLS connection with packagist.org port 443 (step 2/3)
* schannel: failed to receive handshake, need more data
* schannel: SSL/TLS connection with packagist.org port 443 (step 2/3)
* schannel: encrypted data got 1462
* schannel: encrypted data buffer: offset 1462 length 4096
* schannel: next InitializeSecurityContext failed: SEC_E_UNTRUSTED_ROOT (0x80090325) - La chaîne de certificats a été fournie par une autorité qui n'est pas approuvée.
* Closing connection 0
* schannel: shutting down SSL/TLS connection with packagist.org port 443
* schannel: clear security context handle
curl: (77) schannel: next InitializeSecurityContext failed: SEC_E_UNTRUSTED_ROOT (0x80090325)

2 个答案:

答案 0 :(得分:0)

尝试

composer config disable-tls true
composer config secure-http false

您还可以将作曲者配置repositories.packagist.org.url更改为https?://repo.packagist.org

答案 1 :(得分:0)

我不得不在 Ubuntu 上重新安装 CURL 开发库,即将 NSS 风格替换为 OpenSSL 版本:

sudo apt install -y libcurl4-openssl-dev

使用 phpbrew 重建 PHP 导致通过适当的库调用启用了 libcurl;反过来,它会正确识别 CA 证书捆绑,将其指向正确的位置