SSL certificate problem: Verify Failed

[srlaird]

lhungil, Dr. Byte,

The SSL Checker site says everything is good too; dates, serial numbers, etc.

Best,
Shannon

[DrByte]

Okay. Remember, I mentioned there are two possibilities:
a) your own SSL certificate ----- and you indicated that that's not generating any errors

b) the server's internal Certificate Authority for CURL ... which only your hosting company can fix

So, the curltester script is what you'll need to pass on to them to have them fix it, using the guidance I posted above.

[srlaird]

Okay. Remember, I mentioned there are two possibilities:
a) your own SSL certificate ----- and you indicated that that's not generating any errors

b) the server's internal Certificate Authority for CURL ... which only your hosting company can fix

So, the curltester script is what you'll need to pass on to them to have them fix it, using the guidance I posted above.

Dr. Byte,

The hosting company confirmed that we need to get the SSL keys/bundle from the previous hosting company. The SSL is not installed on the new host server. We will get the SSL installed, and I'm guessing that will solve our problem with the new 1.5.3.

No error from the curltester, and no error from the SSL checker. I learned something about SSL today.

Thank you and the team for your support. Donation time.

Best Regards,
Shannon

[RodG]

The hosting company confirmed that we need to get the SSL keys/bundle from the previous hosting company.

They really *shouldn't*, as there is no assurance that all the keys/bundle are actually legitimate.

The SSL is not installed on the new host server.

You don't need SSL installed on *your* host/server in order to have a valid SSL session with a *remote* server.

We will get the SSL installed, and I'm guessing that will solve our problem with the new 1.5.3.

Having SSL installed on your server won't affect communications to the remote server, so if it does happen to solve the problem there is a little more going on than 1st appears.
You could be needlessly installing an SSL certificate (and getting a dedicated IP address that they require) and still end up having the same issues.

Functionally, ZenCart itself doesn't need SSL, and you are only legally required to use it if your store accepts Credit Card Payments directly (IOW, not via a Gateway/payment service).

Although there are many people that 'insist' that all stores should have SSL support I'm a bit of a rare exception and suggest it only be used if/when a merchant knows what SSL does (and more importantly, doesn't) do. Simply installing SSL because it is considered a 'good thing' leads to a false sense of security, which is generally worse than no security at all).

The two most active/profitable sites under my 'care' (over $250K sales per year, each) don't have SSL installed, and I actively discourage them from implementing it because it generally causes more problems than those it is supposed to cure.

Just my 2cents worth.

Cheers
RodG

[DrByte]

While RodG has offered some highly technical comments, their context is not directly applicable to the discussion at hand.
So, don't let that information confuse your new-found knowledge. The solution you've come to is the correct one.

[charmlt]

Same errors: Communication Result: 60 - SSL certificate problem, verify that the CA cert is OK. Details:
error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed

Zen Cart V 5.3
PHP Version 5.4.31
'--with-curl=/opt/curlssl/'
cURL support enabled
cURL Information 7.24.0
curltester reports Linkpoint.api 1129 port GOOD
Dedicated OLM server with dedicated IP for this cart.
Cpanel running completly updated.
Server has another working ZC with Comodo SSL on another IP using Linkpoint and ZC-1.39h.
Wouldn't cURL not work on the other ZC IP on this server if it had a server issue?
Have we concluded yet that the ZC V1.53 FirstData/Linkpoint Module may have a problem?

Best Regards to all the ZC gurus,
Mark

[DrByte]

See: http://www.zen-cart.com/showthread.p...s)-with-v1-5-3