Hello,
I' a new member here so I say Hello to everybody :) I'm using RC about 2 years. Today I'm trying to upgrade RC 1.0.4 to 1.1.3 and I forun that Plugins installation was changed. I'm going trought instruction from https://plugins.roundcube.net/ and after execution command
php composer.phar install
I have an error
[RuntimeException]
Failed to execute git clone --mirror 'https://git.kolab.org/diffusion/PNL/php-net_ldap.git' '/root/.composer/cache/vcs/https---gi
t.kolab.org-diffusion-PNL-php-net-ldap.git/'
error: server certificate verification failed. CAfile: /etc/ssl/certs/ca-certificates.crt CRLfile: none while accessing https://g
it.kolab.org/diffusion/PNL/php-net_ldap.git/info/refs
fatal: HTTP request failed
I know that is problem with missing server certificate, but I can't found how I can get it and install im my system.
Thank you.
Marcin
Quote from: krajewm on November 07, 2015, 12:00:27 PM
Hello,
I' a new member here so I say Hello to everybody :) I'm using RC about 2 years. Today I'm trying to upgrade RC 1.0.4 to 1.1.3 and I forun that Plugins installation was changed. I'm going trought instruction from https://plugins.roundcube.net/ and after execution command
php composer.phar install
I have an error
[RuntimeException]
Failed to execute git clone --mirror 'https://git.kolab.org/diffusion/PNL/php-net_ldap.git' '/root/.composer/cache/vcs/https---gi
t.kolab.org-diffusion-PNL-php-net-ldap.git/'
error: server certificate verification failed. CAfile: /etc/ssl/certs/ca-certificates.crt CRLfile: none while accessing https://g
it.kolab.org/diffusion/PNL/php-net_ldap.git/info/refs
fatal: HTTP request failed
I know that is problem with missing server certificate, but I can't found how I can get it and install im my system.
Thank you.
Marcin
https://support.comodo.com/index.php?/Default/Knowledgebase/Article/View/979/108/domain-validation-sha-2
Create file /etc/ssl/certs/COMODO.pem:
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
rehash certs:
# c_rehash /etc/ssl/certs/
test cert:
# openssl s_client -connect kolab.org:443 -CAfile /etc/ssl/certs/COMODO.pem
CONNECTED(00000003)
depth=3 C = SE, O = AddTrust AB, OU = AddTrust External TTP Network, CN = AddTrust External CA Root
verify return:1
depth=2 C = GB, ST = Greater Manchester, L = Salford, O = COMODO CA Limited, CN = COMODO RSA Certification Authority
verify return:1
depth=1 C = GB, ST = Greater Manchester, L = Salford, O = COMODO CA Limited, CN = COMODO RSA Domain Validation Secure Server CA
verify return:1
depth=0 OU = Domain Control Validated, OU = PositiveSSL Wildcard, CN = *.kolabsys.com
verify return:1
Hello,
I've add Comodo certificate and seems to be working.
New, TLSv1/SSLv3, Cipher is ECDHE-RSA-AES256-GCM-SHA384
Server public key is 2048 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
SSL-Session:
Protocol : TLSv1.2
Cipher : ECDHE-RSA-AES256-GCM-SHA384
Session-ID: 30D806448B44BAF452867EE372FC3E5DDF69C09767F1E8366CF4D5A10F107EE3
Session-ID-ctx:
Master-Key: C1AC243A9FF22EB7CB36CF571911467265401D2B7BD7EB744C7E6E5923896A0E97CA8CA22B438E80A0F4BC60BE8F76C5
Key-Arg : None
PSK identity: None
PSK identity hint: None
SRP username: None
TLS session ticket lifetime hint: 300 (seconds)
TLS session ticket:
0000 - ec 33 85 92 e2 2c 96 db-4e 8b ec d5 38 af 9c fc .3...,..N...8...
0010 - b0 af 97 f6 8b e4 c8 ba-89 21 d3 63 11 5c 61 8f .........!.c.\a.
0020 - 7f fb f8 08 2b 48 e1 21-9e ae a2 46 da ea 4f 8c ....+H.!...F..O.
0030 - 29 53 7e 4f 09 ec ae bf-9a 4f a2 f7 3f 2d 83 ce )S~O.....O..?-..
0040 - ef 5f 33 09 7f 6d 7d 2d-8e e0 47 bc 55 4d 39 28 ._3..m}-..G.UM9(
0050 - 36 ea ae 60 ea 88 ae c8-69 2e 5d 8f 4a 09 d9 ca 6..`....i.].J...
0060 - 8f 4f 49 58 73 7e df fe-f5 17 b7 be e1 25 fd 67 .OIXs~.......%.g
0070 - 8a 3e 4f 87 76 94 3c 23-ef 76 07 63 54 34 4e 85 .>O.v.<#.v.cT4N.
0080 - 55 d7 5b 13 cd 50 e3 c4-1e 3b 0d ee 86 1c cd db U.[..P...;......
0090 - 9c 5a 0f c0 3a 44 b2 55-17 e2 f4 14 37 3b b4 19 .Z..:D.U....7;..
00a0 - fb d9 32 a7 ad 2f d2 64-47 bb 7d a8 a3 27 39 a1 ..2../.dG.}..'9.
00b0 - c2 fc ac dc 22 1b 57 ba-4a f5 1e 5c ca b6 f1 6d ....".W.J..\...m
Start Time: 1446994487
Timeout : 300 (sec)
Verify return code: 0 (ok)
But, I have still same error.
root@aman:/usr/share/roundcube# php composer.phar install
Loading composer repositories with package information
Initializing PEAR repository http://pear.php.net
[RuntimeException]
Failed to execute git clone --mirror 'https://git.kolab.org/diffusion/PNL/php-net_ldap.git' '/root/.composer/cache/vcs/https---git.kolab.org-diffusion-PNL-php-net-ldap.
git/'
error: server certificate verification failed. CAfile: /etc/ssl/certs/ca-certificates.crt CRLfile: none while accessing https://git.kolab.org/diffusion/PNL/php-net_ldap
.git/info/refs
fatal: HTTP request failed
BR,
Marcin
I found solution, simply, from terminal run command:
export GIT_SSL_NO_VERIFY=1
and problem solved.
BR,