Windows 2012 server - 60 => SSL certificate problem: self signed certificate in chain

We have had our ZC on windows servers for over 8 years. Now trying to upgrade our production 1.5.0 to 1.5.4 but getting a prerequisites message as soon as we try to start the install (immediately after the initial upload and launch of ZC).

Message: CURL requires SSL support. Please notify webmaster or hosting company. 60 => SSL certificate problem: self signed certificate in certificate change more info...

See image

Since we are running ZC 1.5.0 in production with a SSL certificate I do not understand this error.

Any help????

Since we are running ZC 1.5.0 in production
In your admin > tools > server version info
In Configure Command block

/usr/local/apache/bin/apxs' '--with-curl=/opt/curlssl/'

Look for curl - it should read something like this

cURL support 	enabled 
SSL 	Yes 

Can't see the same on Windows. Don't know were to look in the provider's cPanel.

I just do not understand how ZC 1.5.0 could be running but not be able to install 1.5.4. Perhaps I just need to somehow ignore that error???

kobra:

In your admin > tools > server version info
In Configure Command block

/usr/local/apache/bin/apxs' '--with-curl=/opt/curlssl/'

> Look for curl - it should read something like this
> ```
cURL support 	enabled 
SSL 	Yes 

QuickBooksDev:

Can't see the same on Windows. Don't know were to look in the provider's cPanel.

I just do not understand how ZC 1.5.0 could be running but not be able to install 1.5.4. Perhaps I just need to somehow ignore that error???

The action/direction of kobra wasto login to your ZC 1.5.0 admin then go to top right corner, select version and then review the data provided...

Here is what ZC 1.5.0 has under version

cURL support ENABLED
cURL Information 7.36.0
.
.
libSSH Version libssh2/1.4.3

So looks like we have cURL so why does 1.5.4 give us a prerequisite error msg???
Could it somehow be related to the SSL??? Which we have and is working for ZC1.5.0. Are there some type of restrictions on the SSL that we have? (OpenSSL/1.0.1g )

SSL certificates for your website/domain are entirely different than the SSL capability used in the background for the server to do external communications using tools such as CURL etc.

You'll need to configure both your Windows Server and your server's PHP to have valid CA Certificates.
A couple articles which may help:

• https://richardwarrender.com/2007/05/the-secret-to-curl-in-php-on-windows/
• https://www.zen-cart.com/showthread.php?213892-Windows-server-Curl-error-%2860%29-SSL-Certificate-problem-Unable-to-get-local-issuer&p=1284548#post1284548

So 1.5.4 requires different SSL from 1.5.0????

QuickBooksDev:

So 1.5.4 requires different SSL from 1.5.0????
No. It requires VALID SSL. Prior to v1.5.2 it skipped verifying that the certificate chain was valid, but that's a bad idea since real transactions require real SSL, not hijackable SSL.