- Plesk for Windows
- Plesk for Linux
PHP cURL libraries unable to connect due to SSL errors.
SSL certificate problem: unable to get local issuer certificate
Error : "error setting certificate verify locations: CAfile: C:\Parallels\Plesk\Additional\PHPSettings\cacert.pem CApath: none" when usage of curl together with ssl site
PHP cURL is not using an updated set of root certificates to verify server certificates.
Around early September 2014, Mozilla removed the trust bits from the certs in their CA bundle that were still using RSA 1024 bit keys. This may lead to TLS libraries having a hard time to verify some sites if the library in question doesn't properly support "path discovery" as per RFC 4158. (That includes OpenSSL and GnuTLS.)
cacert.pemfile from the main curl website http://curl.haxx.se/ca/cacert.pem .
Add the following into
php.inior add into 'Additional directives' under Websites & Domains > PHP settings :
For multiple domains, the settings above can be applied at once through the corresponding Service Plan:
Home > Service Plans > ServicePlan1
, then to
Additional configuration directivesadd
- Synchronize assigned subscriptions with the Service Plan
For Plesk 12.5:
Since 12.5 on Windows, the URL from which
is downloaded can be specified in
file is updated by Daily Maintenance script, by
task, in particular.
cannot be customized from Plesk settings.
setting is missing from
. During an upgrade, or by the Daily Maintenance task, Plesk exports certificates to this file by the command:
"%plesk_dir%\admin\bin\certmng" --export-certificates --path "%plesk_dir%Additional\PHPSettings\cacert.pem"
If certificate does not work, try to download certificate from
and put it into %plesk_dir%
Note: Make sure that the latest version of Mozilla Firefox is used.