[openssl-dev] [openssl.org #4510] SSL certificate problem: unable to get local issuer certificate. Bug?

[SMS Conversation via RT]

On my test server running OpenSSL 1.0.2e on Windows Server 2012.  The
"newest" cacert.pem fails with an error "SSL certificate problem: unable to
get local issuer certificate", however, the one from 2014 works.  I am
attaching both.

<?php
$url = 'https://www.googleapis.com/books/v1/volumes?q=isbn:0747532699';
$req = curl_init($url);
curl_setopt($req, CURLOPT_RETURNTRANSFER, TRUE);
$result = curl_exec($req);

$error = curl_errno($req);
if ($error == CURLE_SSL_PEER_CERTIFICATE || $error == CURLE_SSL_CACERT ||
$error == 77) {
        curl_setopt($req, CURLOPT_CAINFO, 'C:\xampp\php\cacert.pem');
//modify for your location...
        $result = curl_exec($req);
}

if($result === false)
{
    echo 'Curl error: ' . curl_error($req);
}
else
{
    echo 'Operation completed without any errors';
}
?>

-- 
Ticket here: http://rt.openssl.org/Ticket/Display.html?id=4510
Please log in as guest with password guest if prompted

-------------- next part --------------
A non-text attachment was scrubbed...
Name: cacert.pem.20160120.new
Type: application/octet-stream
Size: 269204 bytes
Desc: not available
URL: <http://mta.openssl.org/pipermail/openssl-dev/attachments/20160412/28f0b0bc/attachment-0002.obj>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: cacert.pem.20140813.old
Type: application/octet-stream
Size: 254260 bytes
Desc: not available
URL: <http://mta.openssl.org/pipermail/openssl-dev/attachments/20160412/28f0b0bc/attachment-0003.obj>