Install a PHP SSL CA Bundle

Owned by Oliver Hellwig, created
Last updated: Feb 08, 2022
1 min read

You’re probably reading this because our plugin issued an error message saying that your site does not have an up-to-date bundle of CA root certificates.

For a PHP installation that doesn’t come with the root certificates, like the Windows PHP distribution, you need to download the CA root certificate bundle and tell PHP where to find it. The curl website has the latest CA root certificate bundle ready to go, just download the .pem and save it where your PHP installation can access it.

You just need to edit your php.ini file to tell curl where you saved the .pem file. For example, if you put the .pem file in c:\php, add this line to the php.ini file:

curl.cainfo=c:\php\cacert.pem

After restarting the web service, curl now has a valid CA root certificate bundle and it can verify the SSL certificates of remote servers.

 

References:

https://curl.se/docs/caextract.html

https://snippets.webaware.com.au/howto/stop-turning-off-curlopt_ssl_verifypeer-and-fix-your-php-config/

https://stackoverflow.com/questions/41772340/how-do-i-add-a-certificate-authority-to-php-so-the-file-function-trusts-certif