{"action":"created","issue":{"url":"https://api.github.com/repos/sensiolabs/security-checker/issues/37","labels_url":"https://api.github.com/repos/sensiolabs/security-checker/issues/37/labels{/name}","comments_url":"https://api.github.com/repos/sensiolabs/security-checker/issues/37/comments","events_url":"https://api.github.com/repos/sensiolabs/security-checker/issues/37/events","html_url":"https://github.com/sensiolabs/security-checker/issues/37","id":77679849,"number":37,"title":"SSL problem: An error occurred: SSL certificate problem: unable to get local issuer certificate.","user":{"login":"strietzel","id":4457245,"avatar_url":"https://avatars.githubusercontent.com/u/4457245?v=3","gravatar_id":"","url":"https://api.github.com/users/strietzel","html_url":"https://github.com/strietzel","followers_url":"https://api.github.com/users/strietzel/followers","following_url":"https://api.github.com/users/strietzel/following{/other_user}","gists_url":"https://api.github.com/users/strietzel/gists{/gist_id}","starred_url":"https://api.github.com/users/strietzel/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/strietzel/subscriptions","organizations_url":"https://api.github.com/users/strietzel/orgs","repos_url":"https://api.github.com/users/strietzel/repos","events_url":"https://api.github.com/users/strietzel/events{/privacy}","received_events_url":"https://api.github.com/users/strietzel/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":1,"created_at":"2015-05-18T14:35:17Z","updated_at":"2015-05-20T08:41:23Z","closed_at":null,"body":"I am on a windows host:\r\n\r\nWhen I comment out the line 90 in SecurityChecker.php [curl_setopt($curl, CURLOPT_CAINFO, $cert);] my app takes the certificate file specified in my php.ini (curl.cainfo) instead of the one you provided in Ressources dir.\r\nAnd then it works!\r\n\r\nWith your file I get the ssl error.\r\nIs your security.sensiolabs.org.crt file not up-to-date?"},"comment":{"url":"https://api.github.com/repos/sensiolabs/security-checker/issues/comments/103809618","html_url":"https://github.com/sensiolabs/security-checker/issues/37#issuecomment-103809618","issue_url":"https://api.github.com/repos/sensiolabs/security-checker/issues/37","id":103809618,"user":{"login":"fbourigault","id":1116116,"avatar_url":"https://avatars.githubusercontent.com/u/1116116?v=3","gravatar_id":"","url":"https://api.github.com/users/fbourigault","html_url":"https://github.com/fbourigault","followers_url":"https://api.github.com/users/fbourigault/followers","following_url":"https://api.github.com/users/fbourigault/following{/other_user}","gists_url":"https://api.github.com/users/fbourigault/gists{/gist_id}","starred_url":"https://api.github.com/users/fbourigault/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/fbourigault/subscriptions","organizations_url":"https://api.github.com/users/fbourigault/orgs","repos_url":"https://api.github.com/users/fbourigault/repos","events_url":"https://api.github.com/users/fbourigault/events{/privacy}","received_events_url":"https://api.github.com/users/fbourigault/received_events","type":"User","site_admin":false},"created_at":"2015-05-20T08:41:23Z","updated_at":"2015-05-20T08:41:23Z","body":"I also have the error on my system.\r\n\r\nInformations about php:\r\n```\r\n$ php -v\r\nPHP 5.6.9 (cli) (built: May 15 2015 10:24:33) \r\nCopyright (c) 1997-2015 The PHP Group\r\nZend Engine v2.6.0, Copyright (c) 1998-2015 Zend Technologies\r\n    with Zend OPcache v7.0.4-dev, Copyright (c) 1999-2015, by Zend Technologies\r\n    with blackfire v0.23.0, https://blackfire.io/, by SensioLabs\r\n```\r\n\r\nInformations about curl (php use curl shared library):\r\n```\r\n$ curl --version\r\ncurl 7.42.0 (x86_64-unknown-linux-gnu) libcurl/7.42.0 OpenSSL/1.0.2a zlib/1.2.8 libidn/1.30 libssh2/1.5.0\r\nProtocols: dict file ftp ftps gopher http https imap imaps pop3 pop3s rtsp scp sftp smb smbs smtp smtps telnet tftp \r\nFeatures: AsynchDNS IDN IPv6 Largefile GSS-API Kerberos SPNEGO NTLM NTLM_WB SSL libz TLS-SRP UnixSockets\r\n```\r\n\r\nInformations about security-checker:\r\n```\r\n$ composer global info -i sensiolabs/security-checker\r\nChanged current directory to /home/fabien/.composer\r\nname     : sensiolabs/security-checker\r\ndescrip. : A security checker for your composer.lock\r\nkeywords : \r\nversions : * v2.0.2\r\ntype     : library\r\nlicense  : MIT License (MIT) (OSI approved) http://spdx.org/licenses/MIT#licenseText\r\nsource   : [git] https://github.com/sensiolabs/security-checker.git cecb1397087dc9c733796eda6e9d121336039cdc\r\ndist     : [zip] https://api.github.com/repos/sensiolabs/security-checker/zipball/cecb1397087dc9c733796eda6e9d121336039cdc cecb1397087dc9c733796eda6e9d121336039cdc\r\nnames    : sensiolabs/security-checker\r\n\r\nautoload\r\npsr-0\r\nSensioLabs\\Security => .\r\n\r\nrequires\r\next-curl *\r\nsymfony/console ~2.0\r\n```\r\n\r\nI just tried a GET request on endpoint using curl:\r\n\r\n```\r\n$ LANG=C curl -vvv https://security.sensiolabs.org/check_lock --cacert ~/.composer/vendor/sensiolabs/security-checker/SensioLabs/Security/Resources/security.sensiolabs.org.crt \r\n*   Trying 46.137.102.208...\r\n*   Trying 2a01:578:3::b022:e8db...\r\n* Immediate connect fail for 2a01:578:3::b022:e8db: Network is unreachable\r\n*   Trying 2a01:578:3::2e89:66d0...\r\n* Immediate connect fail for 2a01:578:3::2e89:66d0: Network is unreachable\r\n* Connected to security.sensiolabs.org (46.137.102.208) port 443 (#0)\r\n* ALPN, offering http/1.1\r\n* Cipher selection: ALL:!EXPORT:!EXPORT40:!EXPORT56:!aNULL:!LOW:!RC4:@STRENGTH\r\n* successfully set certificate verify locations:\r\n*   CAfile: /home/fabien/.composer/vendor/sensiolabs/security-checker/SensioLabs/Security/Resources/security.sensiolabs.org.crt\r\n  CApath: none\r\n* TLSv1.2, TLS Unknown, Unknown (22):\r\n* TLSv1.2, TLS handshake, Client hello (1):\r\n* SSLv2, Unknown (22):\r\n* TLSv1.2, TLS handshake, Server hello (2):\r\n* SSLv2, Unknown (22):\r\n* TLSv1.2, TLS handshake, CERT (11):\r\n* SSLv2, Unknown (21):\r\n* TLSv1.2, TLS alert, Server hello (2):\r\n* SSL certificate problem: unable to get local issuer certificate\r\n* Closing connection 0\r\ncurl: (60) SSL certificate problem: unable to get local issuer certificate\r\nMore details here: http://curl.haxx.se/docs/sslcerts.html\r\n\r\ncurl performs SSL certificate verification by default, using a \"bundle\"\r\n of Certificate Authority (CA) public keys (CA certs). If the default\r\n bundle file isn't adequate, you can specify an alternate file\r\n using the --cacert option.\r\nIf this HTTPS server uses a certificate signed by a CA represented in\r\n the bundle, the certificate verification probably failed due to a\r\n problem with the certificate (it might be expired, or the name might\r\n not match the domain name in the URL).\r\nIf you'd like to turn off curl's verification of the certificate, use\r\n the -k (or --insecure) option.\r\n```\r\n\r\nRegards\r\n"}}