error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE in PHP (after update centos-7.4)

error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE

CentOS-7.4 업데이트 이후 PHP측의 별다른 설정 내지는 설치 관련 작업 이슈가 없었음에도 발생

 

1. 테스트 코드

<?
error_reporting(E_ALL);
ini_set("display_errors", 1);

var_dump(openssl_get_cert_locations());

fsockopen("ssl://fcstdpay.inicis.com",443);
?>

정작 작동을 안하는 부분은
fsockopen(”ssl://fcstdpay.inicis.com”,443);
이 부분으로.. 상단은 그냥 에러 참고용…

 

 

2. 발생 에러

PHP Warning: fsockopen(): SSL operation failed with code 1. OpenSSL Error messages:
error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed in /home/jirak.net/public_html/bb.php on line 4
PHP Stack trace:
PHP 1. {main}() /home/jirak.net/public_html/bb.php:0
PHP 2. fsockopen() /home/jirak.net/public_html/bb.php:4

Warning: fsockopen(): SSL operation failed with code 1. OpenSSL Error messages:
error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed in /home/jirak.net/public_html/bb.php on line 4

Call Stack:
0.0003 348216 1. {main}() /home/jirak.net/public_html/bb.php:0
0.0004 348696 2. fsockopen() /home/jirak.net/public_html/bb.php:4

PHP Warning: fsockopen(): Failed to enable crypto in /home/jirak.net/public_html/bb.php on line 4
PHP Stack trace:
PHP 1. {main}() /home/jirak.net/public_html/bb.php:0
PHP 2. fsockopen() /home/jirak.net/public_html/bb.php:4

Warning: fsockopen(): Failed to enable crypto in /home/jirak.net/public_html/bb.php on line 4

Call Stack:
0.0003 348216 1. {main}() /home/jirak.net/public_html/bb.php:0
0.0004 348696 2. fsockopen() /home/jirak.net/public_html/bb.php:4

PHP Warning: fsockopen(): unable to connect to ssl://jirak.net:443 (Unknown error) in /home/jirak.net/public_html/bb.php on line 4
PHP Stack trace:
PHP 1. {main}() /home/jirak.net/public_html/bb.php:0
PHP 2. fsockopen() /home/jirak.net/public_html/bb.php:4

Warning: fsockopen(): unable to connect to ssl://jirak.net:443 (Unknown error) in /home/jirak.net/public_html/bb.php on line 4

Call Stack:
0.0003 348216 1. {main}() /home/jirak.net/public_html/bb.php:0
0.0004 348696 2. fsockopen() /home/jirak.net/public_html/bb.php:4

 

3. 인증서 파일 자체에 문제가 있을 것이라는 추정

업데이트 이전에 사용했던 패키지 : ca-certificates-2017.2.11-70.1.el7_3.noarch

업데이트 이후에 사용했던 패키지 : ca-certificates-2017.2.14-71.el7.noarch

원래 버전으로 다시 되돌림…

yum downgrade ca-certificates-2017.2.11-70.1.el7_3.noarch.rpm

이후 해결됨…

• 각 파일들을 들여다 봤을때는 별다른 의문점을 갖지 못했음.. -_-;;