imap_open: Certificate Error, but only in PHP

Path	csiph.com!usenet.pasdenom.info!news.albasani.net!fu-berlin.de!uni-berlin.de!individual.net!not-for-mail
From	Florian Zeisel <flo74@yahoo.de>
Newsgroups	comp.lang.php
Subject	imap_open: Certificate Error, but only in PHP
Date	Sat, 08 Dec 2012 14:01:29 +0100
Lines	22
Message-ID	<aigs19F2b2gU1@mid.individual.net> (permalink)
Mime-Version	1.0
Content-Type	text/plain
X-Trace	individual.net ny9YSb+Rc7SW41fSZ8Ca9A9ugMErerEfkavu1V99xWqqc/ex5qmRTnIF/i0xmDuBW3
Cancel-Lock	sha1:Ei/B1Z55JsoOhUJCR8AyZbIxPpI=
User-Agent	Web-News v.1.6.4 (by Terence Yim)
Xref	csiph.com comp.lang.php:7745

Show key headers only | View raw

Hi everyone,

this week, one of my php scripts suddenly stopped working. I received the following errors:
It started with: "unable to locate common name", then after a while it was "invalid remote specification".

The code is:
$srv = '{mail.twooit.com:993/imap/ssl/}';
$conn = imap_open($srv, $mailuser, $mailpass) or die("can't connect: " . imap_last_error());

It seems the provider installed a new certificate. Openssl on the terminal results in:
depth=1 /C=GB/ST=Greater Manchester/L=Salford/O=COMODO CA Limited/CN=PositiveSSL CA 2
verify error:num=20:unable to get local issuer certificate
verify return:0

After some research, I was able to make it work by adding the "novalidate-cert" option. However, this means that the script does not authenticate the server anymore, which cannot be the solution! At least: Is it correct to assume that passwords and mails are still transferred encrypted? It might not be that much of a problem, because the script is also executed at that provider (different IP address though), and man-in-the-middle risk is therefore low..

HOWEVER, my Thunderbird email client and also smartphone are still connecting without any certificate errors and ssl-check websites say, that the certificate is ok...

Can anyone help me to fix this, please?

Thank you very much,
Florian

Back to comp.lang.php | Previous | Next — Next in thread | Find similar | Unroll thread

Thread

imap_open: Certificate Error, but only in PHP Florian Zeisel <flo74@yahoo.de> - 2012-12-08 14:01 +0100
  Re: imap_open: Certificate Error, but only in PHP "J.O. Aho" <user@example.net> - 2012-12-08 16:54 +0100
    Re: imap_open: Certificate Error, but only in PHP Florian Zeisel <flo74@yahoo.de> - 2012-12-08 21:30 +0100
  Re: imap_open: Certificate Error, but only in PHP "M. Strobel" <sorry_no_mail_here@nowhere.dee> - 2012-12-08 17:10 +0100
    Re: imap_open: Certificate Error, but only in PHP Florian Zeisel <flo74@yahoo.de> - 2012-12-08 21:33 +0100
      Re: imap_open: Certificate Error, but only in PHP Jerry Stuckle <jstucklex@attglobal.net> - 2012-12-08 19:19 -0500
      Re: imap_open: Certificate Error, but only in PHP "M. Strobel" <sorry_no_mail_here@nowhere.dee> - 2012-12-09 13:15 +0100

csiph-web