Path: csiph.com!usenet.pasdenom.info!news.albasani.net!fu-berlin.de!uni-berlin.de!individual.net!not-for-mail From: Florian Zeisel Newsgroups: comp.lang.php Subject: imap_open: Certificate Error, but only in PHP Date: Sat, 08 Dec 2012 14:01:29 +0100 Lines: 22 Message-ID: Mime-Version: 1.0 Content-Type: text/plain X-Trace: individual.net ny9YSb+Rc7SW41fSZ8Ca9A9ugMErerEfkavu1V99xWqqc/ex5qmRTnIF/i0xmDuBW3 Cancel-Lock: sha1:Ei/B1Z55JsoOhUJCR8AyZbIxPpI= User-Agent: Web-News v.1.6.4 (by Terence Yim) Xref: csiph.com comp.lang.php:7745 Hi everyone, this week, one of my php scripts suddenly stopped working. I received the following errors: It started with: "unable to locate common name", then after a while it was "invalid remote specification". The code is: $srv = '{mail.twooit.com:993/imap/ssl/}'; $conn = imap_open($srv, $mailuser, $mailpass) or die("can't connect: " . imap_last_error()); It seems the provider installed a new certificate. Openssl on the terminal results in: depth=1 /C=GB/ST=Greater Manchester/L=Salford/O=COMODO CA Limited/CN=PositiveSSL CA 2 verify error:num=20:unable to get local issuer certificate verify return:0 After some research, I was able to make it work by adding the "novalidate-cert" option. However, this means that the script does not authenticate the server anymore, which cannot be the solution! At least: Is it correct to assume that passwords and mails are still transferred encrypted? It might not be that much of a problem, because the script is also executed at that provider (different IP address though), and man-in-the-middle risk is therefore low.. HOWEVER, my Thunderbird email client and also smartphone are still connecting without any certificate errors and ssl-check websites say, that the certificate is ok... Can anyone help me to fix this, please? Thank you very much, Florian