On 03/03/2015 22:44, Leonardo Arena wrote:

I've recently upgraded to PHP 5.6 and this problem has shown up:

roundcube: cdfopen: Could not open: 0 could not connect to the host "myhost.mydomain.me http://myhost.mydomain.me": stream_socket_client(): unable to connect to ssl://127.0.0.1:443 http://127.0.0.1:443 (Unknown error)

I've loaded the CA file into "openssl.cafile" php.ini but no workey.

Could anybody shed some light on the nature of the error, or at least how to get more debugging info in order to fix it?

I'm using RC 1.0.4

http://php.net//manual/en/migration56.openssl.php

"While not recommended in general, it is possible to disable peer certificate verification for a request by setting the verify_peer context option to FALSE, and to disable peer name validation by setting the verify_peer_name context option to FALSE."

Elio

On Mar 3, 2015 11:04 PM, "Leonardo Arena" rnalrd@gmail.com wrote:

On Mar 3, 2015 10:52 PM, "Elio Tondo" elio@tondo.it wrote:

...

On 03/03/2015 22:44, Leonardo Arena wrote:

...

I've recently upgraded to PHP 5.6 and this problem has shown up:

roundcube: cdfopen: Could not open: 0 could not connect to the host "myhost.mydomain.me http://myhost.mydomain.me":

stream_socket_client():

...

...

unable to connect to ssl://127.0.0.1:443 http://127.0.0.1:443

(Unknown error)

...

...

I've loaded the CA file into "openssl.cafile" php.ini but no workey.

Could anybody shed some light on the nature of the error, or at least

how to

...

...

get more debugging info in order to fix it?

I'm using RC 1.0.4

http://php.net//manual/en/migration56.openssl.php

"While not recommended in general, it is possible to disable peer

certificate verification for a request by setting the verify_peer context option to FALSE, and to disable peer name validation by setting the verify_peer_name context option to FALSE."

...

The setting openssl.cafile is meant to avoid disabling the check above.

Actually this save me from disabling only "verify_peer". The cert name does not match because I mapped "myhost.mydomain.me" to 127.0.0.1 in the hosts file. I'll try removing it and see if that works.

• leo

On Tuesday, March 03, 2015 10:52:20 PM Elio Tondo wrote:

On 03/03/2015 22:44, Leonardo Arena wrote:

...

I've recently upgraded to PHP 5.6 and this problem has shown up:

roundcube: cdfopen: Could not open: 0 could not connect to the host "myhost.mydomain.me http://myhost.mydomain.me": stream_socket_client(): unable to connect to ssl://127.0.0.1:443 http://127.0.0.1:443 (Unknown error)

I've loaded the CA file into "openssl.cafile" php.ini but no workey.

Could anybody shed some light on the nature of the error, or at least how to get more debugging info in order to fix it?

I'm using RC 1.0.4

http://php.net//manual/en/migration56.openssl.php

"While not recommended in general, it is possible to disable peer certificate verification for a request by setting the verify_peer context option to FALSE, and to disable peer name validation by setting the verify_peer_name context option to FALSE."

Elio

---

Roundcube Users mailing list users@lists.roundcube.net http://lists.roundcube.net/mailman/listinfo/users

That didn't work here. I was trying all the recommendation and ended up with modifying the /etc/php.ini file like this (at the end of the file):

[openssl] ; The location of a Certificate Authority (CA) file on the local filesystem ; to use when verifying the identity of SSL/TLS peers. Most users should ; not specify a value for this directive as PHP will attempt to use the ; OS-managed cert stores in its absence. If specified, this value may still ; be overridden on a per-stream basis via the "cafile" SSL stream context ; option. openssl.cafile=/etc/pki/tls/certs/cyrus-imapd.pem

This isn't a nice way, but I had nothing else that worked.