blocks|key|136076|text|因为您使用的是Windows，所以我认为您的路径分隔符是'\‘(在Linux上是'/’)。尝试使用常量DIRECTORY_SEPARATOR。您的代码将更加可移植。|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|136077|尝试：|136078|curl_setopt($process,+CURLOPT_CAINFO,+dirname(__FILE__)+.+DIRECTORY_SEPARATOR+.+'cacert.pem');|code-block|syntax|javascript|136079|编辑:并写入完整路径。我在相对路径方面遇到了一些问题(也许curl是从另一个基目录执行的？)|136080|entityMap^0|1F|J|0|0|0|0^^$0|@$1|2|3|4|5|6|7|Q|8|@$9|R|A|S|B|C]]|D|@]|E|$]]|$1|F|3|G|5|6|7|T|8|@]|D|@]|E|$]]|$1|H|3|I|5|J|7|U|8|@]|D|@]|E|$K|L]]|$1|M|3|N|5|6|7|V|8|@]|D|@]|E|$]]|$1|O|3|-4|5|6|7|W|8|@]|D|@]|E|$]]]|P|$]]

As you are using Windows, I think your path separator is '\' (and '/' on Linux). 
Try using the constant <code>DIRECTORY_SEPARATOR</code>. Your code will be more portable. 

Try:

<pre><code>curl_setopt($process, CURLOPT_CAINFO, dirname(__FILE__) . DIRECTORY_SEPARATOR . 'cacert.pem');
</code></pre>

EDIT: and write the full path. I had some issues with relative paths (perhaps curl is executed from another base directory?)

blocks|key|2917232|text|你试过..。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|2917233|curl_setopt($process,+CURLOPT_SSL_VERIFYPEER,+false);|code-block|syntax|javascript|2917234|如果您使用的是可信来源，则可以跳过验证。|2917235|entityMap^0|0|0|0^^$0|@$1|2|3|4|5|6|7|K|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|L|8|@]|9|@]|A|$E|F]]|$1|G|3|H|5|6|7|M|8|@]|9|@]|A|$]]|$1|I|3|-4|5|6|7|N|8|@]|9|@]|A|$]]]|J|$]]

Have you tried..
<pre><code>curl_setopt($process, CURLOPT_SSL_VERIFYPEER, false);
</code></pre>
If you are consuming a trusted source you can skip the verify.

blocks|key|2704600|text|Guzzle由cartalyst/stripe使用，它将执行以下操作来查找用于检查服务器证书的适当证书存档：|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|2704601|2704602|检查openssl.cafile是否设置在php.ini文件中。|ordered-list-item|style|CODE|2704603|检查curl.cainfo是否设置在php.ini文件中。|2704604|检查/etc/pki/tls/certs/ca-bundle.crt是否存在(红帽，CentOS，Fedora；由ca-certificates+package)|2704605|Check提供，如果D12存在)+(Ubuntu，Debian；由ca-+package)|2704606|Check+package)|2704607|Check提供，如果/usr/local/share/certs/ca-root-nss.crt存在(FreeBSD；由ca_root_nss+ca提供，如果D18+(OS+X；如果存在homebrew)|2704608|Check，则由(Windows)|2704609|Check提供。如果C:\windows\system32\curl-ca-bundle.crt存在，则由C:\windows\curl-ca-bundle.crt提供。|2704610|2704611|您需要通过执行一个简单的测试来确保正确定义前两个设置的值：|2704612|echo+"openssl.cafile:+",+ini_get('openssl.cafile'),+"\n";
echo+"curl.cainfo:+",+ini_get('curl.cainfo'),+"\n";|code-block|syntax|javascript|2704613|或者，尝试将文件写入由#7或#8指示的位置。|2704614|entityMap|0|LINK|mutability|MUTABLE|url|https://github.com/cartalyst/stripe^0|7|G|0|0|0|2|E|0|2|B|0|2|W|0|0|0|A|12|0|0|A|12|1H|T|0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|1F|8|@]|9|@$A|1G|B|1H|1|1I]]|C|$]]|$1|D|3|-4|5|6|7|1J|8|@]|9|@]|C|$]]|$1|E|3|F|5|G|7|1K|8|@$A|1L|B|1M|H|I]]|9|@]|C|$]]|$1|J|3|K|5|G|7|1N|8|@$A|1O|B|1P|H|I]]|9|@]|C|$]]|$1|L|3|M|5|G|7|1Q|8|@$A|1R|B|1S|H|I]]|9|@]|C|$]]|$1|N|3|O|5|G|7|1T|8|@]|9|@]|C|$]]|$1|P|3|Q|5|G|7|1U|8|@]|9|@]|C|$]]|$1|R|3|S|5|G|7|1V|8|@$A|1W|B|1X|H|I]]|9|@]|C|$]]|$1|T|3|U|5|G|7|1Y|8|@]|9|@]|C|$]]|$1|V|3|W|5|G|7|1Z|8|@$A|20|B|21|H|I]|$A|22|B|23|H|I]]|9|@]|C|$]]|$1|X|3|-4|5|6|7|24|8|@]|9|@]|C|$]]|$1|Y|3|Z|5|6|7|25|8|@]|9|@]|C|$]]|$1|10|3|11|5|12|7|26|8|@]|9|@]|C|$13|14]]|$1|15|3|16|5|6|7|27|8|@]|9|@]|C|$]]|$1|17|3|-4|5|6|7|28|8|@]|9|@]|C|$]]]|18|$19|$5|1A|1B|1C|C|$1D|1E]]]]

Guzzle, which is used by <a href="https://github.com/cartalyst/stripe">cartalyst/stripe</a>, will do the following to find a proper certificate archive to check a server certificate against:

<ol>
<li>Check if <code>openssl.cafile</code> is set in your php.ini file.</li>
<li>Check if <code>curl.cainfo</code> is set in your php.ini file.</li>
<li>Check if <code>/etc/pki/tls/certs/ca-bundle.crt</code> exists (Red Hat, CentOS, Fedora; provided by the ca-certificates package)</li>
<li>Check if <code>/etc/ssl/certs/ca-certificates.crt</code> exists (Ubuntu, Debian; provided by the ca-certificates package)</li>
<li>Check if <code>/usr/local/share/certs/ca-root-nss.crt</code> exists (FreeBSD; provided by the ca_root_nss package)</li>
<li>Check if <code>/usr/local/etc/openssl/cert.pem</code> (OS X; provided by homebrew)</li>
<li>Check if <code>C:\windows\system32\curl-ca-bundle.crt</code> exists (Windows)</li>
<li>Check if <code>C:\windows\curl-ca-bundle.crt</code> exists (Windows)</li>
</ol>

You will want to make sure that the values for the first two settings are properly defined by doing a simple test:

<pre><code>echo "openssl.cafile: ", ini_get('openssl.cafile'), "\n";
echo "curl.cainfo: ", ini_get('curl.cainfo'), "\n";
</code></pre>

Alternatively, try to write the file into the locations indicated by #7 or #8.

blocks|key|2704699|text|我找到了一个对我有效的解决方案。我从最新的guzzle版本降级到了~4.0版本，它起作用了。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|2704700|在composer.json中添加“guzzlehttp/guzzlehttp”："~4.0“|2704701|希望这能帮助到某个人|2704702|entityMap^0|0|0|0^^$0|@$1|2|3|4|5|6|7|H|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|I|8|@]|9|@]|A|$]]|$1|D|3|E|5|6|7|J|8|@]|9|@]|A|$]]|$1|F|3|-4|5|6|7|K|8|@]|9|@]|A|$]]]|G|$]]

I found a solution that worked for me. I downgraded from the latest guzzle to version ~4.0 and it worked.

In composer.json add "guzzlehttp/guzzle": "~4.0"

Hope it helps someone

blocks|key|135160|text|如果你正在使用PHP5.6和Guzzle，Guzzle已经切换到使用PHP库自动检测证书，而不是它的进程(ref)。PHP概述了here的变化。|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|135161|找出PHP/Guzzle在哪里寻找证书|135162|您可以使用以下PHP命令转储PHP正在查找的位置：|135163|+var_dump(openssl_get_cert_locations());|code-block|syntax|javascript|135164|获取证书捆绑包|135165|对于OS测试，您可以使用自制软件安装openssl+brew+install+openssl，然后在您的php.ini或Zend+Server设置中使用openssl.cafile=/usr/local/etc/openssl/cert.pem+(在OpenSSL下)。|style|CODE|135166|curl网站上的curl/Mozilla也提供了证书捆绑包：https://curl.haxx.se/docs/caextract.html|135167|告诉PHP证书在哪里|135168|一旦你有了一个包，要么把它放在PHP已经在查找的地方(你在上面找到了)，要么在php.ini中更新openssl.cafile。(通常，在Unix上为/etc/php.ini或/etc/php/7.0/cli/php.ini或/etc/php/php.ini。)|135169|entityMap|0|LINK|mutability|MUTABLE|url|http://guzzle.readthedocs.org/en/latest/request-options.html#verify-option|1|http://php.net/manual/en/migration56.openssl.php|2|https://curl.haxx.se/docs/caextract.html^0|1H|3|0|1S|4|1|0|0|0|0|0|Q|K|24|1A|0|U|14|2|0|0|1D|E|23|C|2G|O|35|G|0^^$0|@$1|2|3|4|5|6|7|1A|8|@]|9|@$A|1B|B|1C|1|1D]|$A|1E|B|1F|1|1G]]|C|$]]|$1|D|3|E|5|6|7|1H|8|@]|9|@]|C|$]]|$1|F|3|G|5|6|7|1I|8|@]|9|@]|C|$]]|$1|H|3|I|5|J|7|1J|8|@]|9|@]|C|$K|L]]|$1|M|3|N|5|6|7|1K|8|@]|9|@]|C|$]]|$1|O|3|P|5|6|7|1L|8|@$A|1M|B|1N|Q|R]|$A|1O|B|1P|Q|R]]|9|@]|C|$]]|$1|S|3|T|5|6|7|1Q|8|@]|9|@$A|1R|B|1S|1|1T]]|C|$]]|$1|U|3|V|5|6|7|1U|8|@]|9|@]|C|$]]|$1|W|3|X|5|6|7|1V|8|@$A|1W|B|1X|Q|R]|$A|1Y|B|1Z|Q|R]|$A|20|B|21|Q|R]|$A|22|B|23|Q|R]]|9|@]|C|$]]|$1|Y|3|-4|5|6|7|24|8|@]|9|@]|C|$]]]|Z|$10|$5|11|12|13|C|$14|15]]|16|$5|11|12|13|C|$14|17]]|18|$5|11|12|13|C|$14|19]]]]

If you are using PHP 5.6 with Guzzle, Guzzle has switched to using the PHP libraries autodetect for certificates rather than it's process (<a href="http://guzzle.readthedocs.org/en/latest/request-options.html#verify-option" rel="nofollow noreferrer">ref</a>). PHP outlines the changes <a href="http://php.net/manual/en/migration56.openssl.php" rel="nofollow noreferrer">here</a>.
<h1>Finding out Where PHP/Guzzle is Looking for Certificates</h1>
You can dump where PHP is looking using the following PHP command:
<pre><code> var_dump(openssl_get_cert_locations());
</code></pre>
<h1>Getting a Certificate Bundle</h1>
For OS X testing, you can use homebrew to install openssl <code>brew install openssl</code> and then use <code>openssl.cafile=/usr/local/etc/openssl/cert.pem</code> in your php.ini or Zend Server settings (under OpenSSL).
A certificate bundle is also available from curl/Mozilla on the curl website: <a href="https://curl.haxx.se/docs/caextract.html" rel="nofollow noreferrer">https://curl.haxx.se/docs/caextract.html</a>
<h1>Telling PHP Where the Certificates Are</h1>
Once you have a bundle, either place it where PHP is already looking (which you found out above) or update <code>openssl.cafile</code> in php.ini. (Generally, <code>/etc/php.ini</code> or <code>/etc/php/7.0/cli/php.ini</code> or <code>/etc/php/php.ini</code> on Unix.)

blocks|key|138243|text|如何解决这个问题：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|138244|按照https://curl.se/docs/caextract.html上的说明下载并解压|offset|length|138245|+cacert.pem|unordered-list-item|138246|138247|XAMPP用户可以使用C:\xampp\php\extras\ssl\cacert.pem)将其保存在您的文件系统中的某个位置(例如，|style|CODE|138248|用户可以使用C:\xampp\php\extras\ssl\cacert.pem)|138249|138250|138251|在您的php.ini中，将此文件位置放在[curl]部分(将其放在[openss]部分也是一个好主意)：|138252|138253|[curl]
curl.cainfo+=+"C:\xampp\php\extras\ssl\cacert.pem"

[openssl]
openssl.cafile+=+"C:\xampp\php\extras\ssl\cacert.pem"|code-block|syntax|javascript|138254|138255|重新启动FPM服务器(例如Apache)和PHP+FPM服务器(如果适用)|138256|138257|(参考：https://laracasts.com/discuss/channels/general-discussion/curl-error-60-ssl-certificate-problem-unable-to-get-local-issuer-certificate)|138258|entityMap|0|LINK|mutability|MUTABLE|url|https://curl.se/docs/caextract.html|1|https://curl.se/ca/cacert.pem|2|https://laracasts.com/discuss/channels/general-discussion/curl-error-60-ssl-certificate-problem-unable-to-get-local-issuer-certificate^0|0|2|Z|0|0|1|A|1|0|0|B|Y|0|6|Y|0|0|0|K|6|X|8|0|0|0|0|0|0|4|3Q|2|0^^$0|@$1|2|3|4|5|6|7|1H|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|1I|8|@]|9|@$D|1J|E|1K|1|1L]]|A|$]]|$1|F|3|G|5|H|7|1M|8|@]|9|@$D|1N|E|1O|1|1P]]|A|$]]|$1|I|3|-4|5|6|7|1Q|8|@]|9|@]|A|$]]|$1|J|3|K|5|6|7|1R|8|@$D|1S|E|1T|L|M]]|9|@]|A|$]]|$1|N|3|O|5|H|7|1U|8|@$D|1V|E|1W|L|M]]|9|@]|A|$]]|$1|P|3|-4|5|6|7|1X|8|@]|9|@]|A|$]]|$1|Q|3|-4|5|6|7|1Y|8|@]|9|@]|A|$]]|$1|R|3|S|5|H|7|1Z|8|@$D|20|E|21|L|M]|$D|22|E|23|L|M]]|9|@]|A|$]]|$1|T|3|-4|5|6|7|24|8|@]|9|@]|A|$]]|$1|U|3|V|5|W|7|25|8|@]|9|@]|A|$X|Y]]|$1|Z|3|-4|5|6|7|26|8|@]|9|@]|A|$]]|$1|10|3|11|5|H|7|27|8|@]|9|@]|A|$]]|$1|12|3|-4|5|6|7|28|8|@]|9|@]|A|$]]|$1|13|3|14|5|6|7|29|8|@]|9|@$D|2A|E|2B|1|2C]]|A|$]]|$1|15|3|-4|5|6|7|2D|8|@]|9|@]|A|$]]]|16|$17|$5|18|19|1A|A|$1B|1C]]|1D|$5|18|19|1A|A|$1B|1E]]|1F|$5|18|19|1A|A|$1B|1G]]]]

How to solve this problem:
<ul>
<li>download and extract <a href="https://curl.se/ca/cacert.pem" rel="nofollow noreferrer">cacert.pem</a> following the instructions at <a href="https://curl.se/docs/caextract.html" rel="nofollow noreferrer">https://curl.se/docs/caextract.html</a>
</li>
<li>save it on your filesystem somewhere (for example, XAMPP users might use <code>C:\xampp\php\extras\ssl\cacert.pem</code>)
</li>
<li>in your php.ini, put this file location in the <code>[curl]</code> section (putting it in the <code>[openss]</code> section is also a good idea):
</li>
</ul>
<pre><code>[curl]
curl.cainfo = &quot;C:\xampp\php\extras\ssl\cacert.pem&quot;

[openssl]
openssl.cafile = &quot;C:\xampp\php\extras\ssl\cacert.pem&quot;
</code></pre>
<ul>
<li>restart your webserver (e.g. Apache) and PHP FPM server if applicable</li>
</ul>
(Reference: <a href="https://laracasts.com/discuss/channels/general-discussion/curl-error-60-ssl-certificate-problem-unable-to-get-local-issuer-certificate" rel="nofollow noreferrer">https://laracasts.com/discuss/channels/general-discussion/curl-error-60-ssl-certificate-problem-unable-to-get-local-issuer-certificate</a>)

blocks|key|2917511|text|有一天，我突然发现了这个问题，当时一个guzzy5脚本试图通过SSL连接到主机。当然，我可以禁用Guzzle/Curl中的VERIFY选项，但这显然不是正确的方法。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|2917512|我尝试了这里列出的所有内容和类似的线程，然后最终使用openssl连接到终端，以针对我试图连接的域进行测试：|2917513|openssl+s_client+-connect+example.com:443+|code-block|syntax|javascript|2917514|..。并且接收到的前几行表示：|2917515|CONNECTED(00000003)
depth=0+CN+=+example.com
verify+error:num=20:unable+to+get+local+issuer+certificate
verify+return:1
depth=0+CN+=+example.com
verify+error:num=21:unable+to+verify+the+first+certificate
verify+return:1+|2917516|..。当尝试其他目的地(例如:+google.com等)时，一切工作正常|2917517|这促使我联系了我一直试图连接的域名，事实上，他们的一端出现了一个问题，已经悄悄上升。这个问题已经解决了，我的脚本又开始工作了。|2917518|所以..。如果你在胡思乱想，那就试试openssl，看看来自你试图连接的位置的响应是否有什么问题。也许有时候问题并不是那么“地方性”的。|2917519|entityMap^0|0|0|0|0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|U|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|V|8|@]|9|@]|A|$]]|$1|D|3|E|5|F|7|W|8|@]|9|@]|A|$G|H]]|$1|I|3|J|5|6|7|X|8|@]|9|@]|A|$]]|$1|K|3|L|5|F|7|Y|8|@]|9|@]|A|$G|H]]|$1|M|3|N|5|6|7|Z|8|@]|9|@]|A|$]]|$1|O|3|P|5|6|7|10|8|@]|9|@]|A|$]]|$1|Q|3|R|5|6|7|11|8|@]|9|@]|A|$]]|$1|S|3|-4|5|6|7|12|8|@]|9|@]|A|$]]]|T|$]]

I had this problem appear out-of-the-blue one day, when a Guzzle(5) script was attempting to connect to a host over SSL. Sure, I could disable the VERIFY option in Guzzle/Curl, but that's clearly not the correct way to go.

I tried everything listed here and in similar threads, then eventually went to terminal with openssl to test against the domain with which I was trying to connect:

<pre><code>openssl s_client -connect example.com:443 
</code></pre>

... and received first few lines indicating:

<pre><code>CONNECTED(00000003)
depth=0 CN = example.com
verify error:num=20:unable to get local issuer certificate
verify return:1
depth=0 CN = example.com
verify error:num=21:unable to verify the first certificate
verify return:1 
</code></pre>

... while everything worked fine when trying other destinations (ie: google.com, etc)

This prompted me to contact the domain I had been trying to connect to, and indeed, they had a problem on THEIR END that had crept up. It was resolved and my script went back to working.

So... if you're pulling your hair out, give openssl a shot and see if there's anything up with the response from the location you are attempting to connect. Maybe the issue isn't so 'local' after all sometimes.

blocks|key|2704897|text|如果您无法更改php.ini，您也可以通过如下代码指向cacert.pem文件：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|2704898|$http+=+new+GuzzleHttp\Client(['verify'+=>+'/path/to/cacert.pem']);
$client+=+new+Google_Client();
$client->setHttpClient($http);|code-block|syntax|javascript|2704899|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|I|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|J|8|@]|9|@]|A|$E|F]]|$1|G|3|-4|5|6|7|K|8|@]|9|@]|A|$]]]|H|$]]

If you're unable to change php.ini you could also point to the cacert.pem file from code like this:

<pre><code>$http = new GuzzleHttp\Client(['verify' =&gt; '/path/to/cacert.pem']);
$client = new Google_Client();
$client-&gt;setHttpClient($http);
</code></pre>

blocks|key|2917584|text|我所做的是在任何php脚本中使用var_dump(openssl_get_cert_locations());+die;，这给了我关于我的本地php使用的默认值的信息：|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|2917585|array+(size=8)
++'default_cert_file'+=>+string+'c:/openssl-1.0.1c/ssl/cert.pem'+(length=30)
++'default_cert_file_env'+=>+string+'SSL_CERT_FILE'+(length=13)
++'default_cert_dir'+=>+string+'c:/openssl-1.0.1c/ssl/certs'+(length=27)
++'default_cert_dir_env'+=>+string+'SSL_CERT_DIR'+(length=12)
++'default_private_dir'+=>+string+'c:/openssl-1.0.1c/ssl/private'+(length=29)
++'default_default_cert_area'+=>+string+'c:/openssl-1.0.1c/ssl'+(length=21)
++'ini_cafile'+=>+string+'E:\xampp\php\extras\ssl\cacert.pem'+(length=34)
++'ini_capath'+=>+string+''+(length=0)|code-block|syntax|javascript|2917586|正如您所注意到的，我已经设置了ini_cafile或ini选项curl.cainfo。但在我的例子中，curl会尝试使用并不存在的"default_cert_file“。|2917587|我将文件从https://curl.haxx.se/ca/cacert.pem复制到"default_cert_file“的位置(c:/openssl-1.0.1c/ssl/cert.pem)，并且我能够让它工作。|2917588|这是我唯一的解决方案。|2917589|entityMap|0|LINK|mutability|MUTABLE|url|https://curl.haxx.se/ca/cacert.pem^0|G|18|0|0|0|5|Y|0|0|0^^$0|@$1|2|3|4|5|6|7|Y|8|@$9|Z|A|10|B|C]]|D|@]|E|$]]|$1|F|3|G|5|H|7|11|8|@]|D|@]|E|$I|J]]|$1|K|3|L|5|6|7|12|8|@]|D|@]|E|$]]|$1|M|3|N|5|6|7|13|8|@]|D|@$9|14|A|15|1|16]]|E|$]]|$1|O|3|P|5|6|7|17|8|@]|D|@]|E|$]]|$1|Q|3|-4|5|6|7|18|8|@]|D|@]|E|$]]]|R|$S|$5|T|U|V|E|$W|X]]]]

What i did was use <code>var_dump(openssl_get_cert_locations()); die;</code> in any php script, which gave me the information about defaults that my local php was using:

<pre><code>array (size=8)
 'default_cert_file' =&gt; string 'c:/openssl-1.0.1c/ssl/cert.pem' (length=30)
 'default_cert_file_env' =&gt; string 'SSL_CERT_FILE' (length=13)
 'default_cert_dir' =&gt; string 'c:/openssl-1.0.1c/ssl/certs' (length=27)
 'default_cert_dir_env' =&gt; string 'SSL_CERT_DIR' (length=12)
 'default_private_dir' =&gt; string 'c:/openssl-1.0.1c/ssl/private' (length=29)
 'default_default_cert_area' =&gt; string 'c:/openssl-1.0.1c/ssl' (length=21)
 'ini_cafile' =&gt; string 'E:\xampp\php\extras\ssl\cacert.pem' (length=34)
 'ini_capath' =&gt; string '' (length=0)
</code></pre>

As you can notice, i have set the ini_cafile or the ini option curl.cainfo. But in my case, curl would try to use the "default_cert_file" which did not exist. 

I copied the file from <a href="https://curl.haxx.se/ca/cacert.pem" rel="noreferrer">https://curl.haxx.se/ca/cacert.pem</a> into the location for "default_cert_file" (c:/openssl-1.0.1c/ssl/cert.pem) and i was able to get it to work. 

This was the only solution for me.

blocks|key|2704964|text|请确保通过Window资源管理器直接打开php.ini文件。(在我的例子中：C:\DevPrograms\wamp64\bin\php\php5.6.25)。|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|2704965|不要使用系统托盘中的Wamp/Xamp图标菜单中的php.ini快捷方式。在这种情况下，此快捷方式不起作用。|2704966|然后编辑该php.ini：|2704967|curl.cainfo+="C:/DevPrograms/wamp64/bin/php/cacert.pem"+|code-block|syntax|javascript|2704968|和|2704969|openssl.cafile="C:/DevPrograms/wamp64/bin/php/cacert.pem"|2704970|保存php.ini后，您不需要在Wamp图标中“重新启动所有服务”或关闭/重新打开CMD。|2704971|entityMap^0|K|7|12|13|0|P|7|0|5|7|0|0|0|0|2|7|0^^$0|@$1|2|3|4|5|6|7|W|8|@$9|X|A|Y|B|C]|$9|Z|A|10|B|C]]|D|@]|E|$]]|$1|F|3|G|5|6|7|11|8|@$9|12|A|13|B|C]]|D|@]|E|$]]|$1|H|3|I|5|6|7|14|8|@$9|15|A|16|B|C]]|D|@]|E|$]]|$1|J|3|K|5|L|7|17|8|@]|D|@]|E|$M|N]]|$1|O|3|P|5|6|7|18|8|@]|D|@]|E|$]]|$1|Q|3|R|5|L|7|19|8|@]|D|@]|E|$M|N]]|$1|S|3|T|5|6|7|1A|8|@$9|1B|A|1C|B|C]]|D|@]|E|$]]|$1|U|3|-4|5|6|7|1D|8|@]|D|@]|E|$]]]|V|$]]

Be sure that you open the <code>php.ini</code> file directly by your Window Explorer. (in my case: <code>C:\DevPrograms\wamp64\bin\php\php5.6.25</code>). 

Don't use the shortcut to <code>php.ini</code> in the Wamp/Xamp icon's menu in the System Tray. This shortcut doesn't work in this case.

Then edit that <code>php.ini</code> :

<pre><code>curl.cainfo ="C:/DevPrograms/wamp64/bin/php/cacert.pem" 
</code></pre>

and

<pre><code>openssl.cafile="C:/DevPrograms/wamp64/bin/php/cacert.pem"
</code></pre>

After saving <code>php.ini</code> you don't need to "Restart All Services" in Wamp icon or close/re-open CMD.

blocks|key|135255|text|如果您使用WAMP，您还应该在php.ini中添加证书行(除了默认的php.ini文件)：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|135256|[curl]
curl.cainfo+=+C:\your_location\cacert.pem|code-block|syntax|javascript|135257|适用于php5.3%2B|135258|entityMap^0|0|0|0^^$0|@$1|2|3|4|5|6|7|K|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|L|8|@]|9|@]|A|$E|F]]|$1|G|3|H|5|6|7|M|8|@]|9|@]|A|$]]|$1|I|3|-4|5|6|7|N|8|@]|9|@]|A|$]]]|J|$]]

if you use WAMP you should also add the certificate line in php.ini for Apache (besides the default php.ini file):

<pre><code>[curl]
curl.cainfo = C:\your_location\cacert.pem
</code></pre>

works for php5.3+

blocks|key|2917679|text|我刚刚在使用guzzlehttp/guzzle+composer包的Laravel4php框架中遇到了同样的问题。由于某些原因，邮件枪的SSL证书突然停止验证，我收到了同样的"error+60“消息。|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|2917680|如果像我一样，你在一个共享主机上，无法访问php.ini，那么其他的解决方案是不可能的。在任何情况下，Guzzle都会让这个客户端初始化最有可能使php.ini效果无效的代码：|2917681|//+vendor/guzzlehttp/guzzle/src/Client.php
++++$settings+=+[
++++++++'allow_redirects'+=>+true,
++++++++'exceptions'++++++=>+true,
++++++++'decode_content'++=>+true,
++++++++'verify'++++++++++=>+__DIR__+.+'/cacert.pem'
++++];|code-block|syntax|javascript|2917682|在这里，cURL's+environment强制使用它自己的内部cacert.pem文件，而不是使用Guzzle提供的文件。更改这一行(至少在Linux上)会将Guzzle配置为使用cURL的默认SSL验证逻辑，并修复了我的问题：|2917683|++++++++'verify'++++++++++=>+true|2917684|如果您不关心SSL连接的安全性，也可以将其设置为false，但这不是一个好的解决方案。|2917685|由于vendor中的文件是不能被篡改的，一个更好的解决方案是在使用时使用configure+the+Guzzle+client，但在Larave4中这太难了。|2917686|希望这能为其他人节省几个小时的调试时间。|2917687|entityMap|0|LINK|mutability|MUTABLE|url|https://curl.haxx.se/docs/sslcerts.html|1|http://docs.guzzlephp.org/en/stable/request-options.html#verify-option^0|6|H|0|L|7|21|7|0|0|4|I|0|0|0|O|5|0|2|6|10|R|1|0|0^^$0|@$1|2|3|4|5|6|7|16|8|@$9|17|A|18|B|C]]|D|@]|E|$]]|$1|F|3|G|5|6|7|19|8|@$9|1A|A|1B|B|C]|$9|1C|A|1D|B|C]]|D|@]|E|$]]|$1|H|3|I|5|J|7|1E|8|@]|D|@]|E|$K|L]]|$1|M|3|N|5|6|7|1F|8|@]|D|@$9|1G|A|1H|1|1I]]|E|$]]|$1|O|3|P|5|J|7|1J|8|@]|D|@]|E|$K|L]]|$1|Q|3|R|5|6|7|1K|8|@$9|1L|A|1M|B|C]]|D|@]|E|$]]|$1|S|3|T|5|6|7|1N|8|@$9|1O|A|1P|B|C]]|D|@$9|1Q|A|1R|1|1S]]|E|$]]|$1|U|3|V|5|6|7|1T|8|@]|D|@]|E|$]]|$1|W|3|-4|5|6|7|1U|8|@]|D|@]|E|$]]]|X|$Y|$5|Z|10|11|E|$12|13]]|14|$5|Z|10|11|E|$12|15]]]]

I just experienced this same problem with the Laravel 4 php framework which uses the <code>guzzlehttp/guzzle</code> composer package. For some reason, the SSL certificate for mailgun stopped validating suddenly and I got that same "error 60" message.

If, like me, you are on a shared hosting without access to <code>php.ini</code>, the other solutions are not possible. In any case, Guzzle has this client initializing code that would most likely nullify the <code>php.ini</code> effects:

<pre><code>// vendor/guzzlehttp/guzzle/src/Client.php
 $settings = [
 'allow_redirects' =&gt; true,
 'exceptions' =&gt; true,
 'decode_content' =&gt; true,
 'verify' =&gt; __DIR__ . '/cacert.pem'
 ];
</code></pre>

Here Guzzle forces usage of its own internal cacert.pem file, which is probably now out of date, instead of using the one provided by <a href="https://curl.haxx.se/docs/sslcerts.html" rel="nofollow noreferrer">cURL's environment</a>. Changing this line (on Linux at least) configures Guzzle to use cURL's default SSL verification logic and fixed my problem:

<pre><code> 'verify' =&gt; true
</code></pre>

You can also set this to <code>false</code> if you don't care about the security of your SSL connection, but that's not a good solution.

Since the files in <code>vendor</code> are not meant to be tampered with, a better solution would be to <a href="http://docs.guzzlephp.org/en/stable/request-options.html#verify-option" rel="nofollow noreferrer">configure the Guzzle client</a> on usage, but this was just too difficult to do in Laravel 4.

Hope this saves someone else a couple hours of debugging...

blocks|key|135430|text|Wamp/Wordpress/windows用户请注意。我有这个问题好几个小时了，甚至连正确的答案都没有为我解决，因为我编辑了错误的php.ini文件，因为这个问题是给XAMPP而不是给WAMP用户的，即使这个问题是给WAMP的。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|135431|135432|下载certificate+bundle.|offset|length|135433|将其放入C:\wamp64\bin\php\your+php+version\extras\ssl中|style|CODE|135434|135435|135436|在php.ini中启用php_openssl.dll。请注意，我的问题是我有两个php.ini文件，我需要在这两个文件中执行此操作。第一个可以在你的WAMP任务栏图标里面找到。|135437|​|135438|📷|atomic|135439|135440|135441|找到这两个php.ini文件的位置，找到curl.cainfo+=行，并为其指定如下路径|135442|curl.cainfo+=+"C:\wamp64\bin\php\php(Version)\extras\ssl\cacert.pem"|135443|现在保存文件并重新启动服务器，您就可以开始工作了|135444|entityMap|0|LINK|mutability|MUTABLE|url|https://curl.haxx.se/docs/caextract.html|1|IMAGE|IMMUTABLE|imageUrl|https://ask.qcloudimg.com/http-save/yehe-900000/7ea4a339baab45197f2ec523ba70fa9e.png|imageAlt^0|0|0|2|J|0|0|4|19|0|0|0|1|7|B|F|0|0|0|1|1|0|0|0|5|7|K|D|0|0|1W|0|0^^$0|@$1|2|3|4|5|6|7|1F|8|@]|9|@]|A|$]]|$1|B|3|-4|5|6|7|1G|8|@]|9|@]|A|$]]|$1|C|3|D|5|6|7|1H|8|@]|9|@$E|1I|F|1J|1|1K]]|A|$]]|$1|G|3|H|5|6|7|1L|8|@$E|1M|F|1N|I|J]]|9|@]|A|$]]|$1|K|3|-4|5|6|7|1O|8|@]|9|@]|A|$]]|$1|L|3|-4|5|6|7|1P|8|@]|9|@]|A|$]]|$1|M|3|N|5|6|7|1Q|8|@$E|1R|F|1S|I|J]|$E|1T|F|1U|I|J]]|9|@]|A|$]]|$1|O|3|P|5|6|7|1V|8|@]|9|@]|A|$]]|$1|Q|3|R|5|S|7|1W|8|@]|9|@$E|1X|F|1Y|1|1Z]]|A|$]]|$1|T|3|P|5|6|7|20|8|@]|9|@]|A|$]]|$1|U|3|-4|5|6|7|21|8|@]|9|@]|A|$]]|$1|V|3|W|5|6|7|22|8|@$E|23|F|24|I|J]|$E|25|F|26|I|J]]|9|@]|A|$]]|$1|X|3|Y|5|6|7|27|8|@$E|28|F|29|I|J]]|9|@]|A|$]]|$1|Z|3|10|5|6|7|2A|8|@]|9|@]|A|$]]|$1|11|3|-4|5|6|7|2B|8|@]|9|@]|A|$]]]|12|$13|$5|14|15|16|A|$17|18]]|19|$5|1A|15|1B|A|$1C|1D|1E|-4]]]]

Attention Wamp/Wordpress/windows users. I had this issue for hours and not even the correct answer was doing it for me, because i was editing the wrong php.ini file because the question was answered to XAMPP and not for WAMP users, even though the question was for WAMP. 

here's what i did

Download the <a href="https://curl.haxx.se/docs/caextract.html" rel="noreferrer">certificate bundle.</a>

Put it inside of <code>C:\wamp64\bin\php\your php version\extras\ssl</code>

Make sure the file <code>mod_ssl.so</code> is inside of <code>C:\wamp64\bin\apache\apache(version)\modules</code>

Enable <code>mod_ssl</code> in <code>httpd.conf</code> inside of Apache directory <code>C:\wamp64\bin\apache\apache2.4.27\conf</code>

Enable <code>php_openssl.dll</code> in <code>php.ini</code>. Be aware my problem was that I had two php.ini files and I need to do this in both of them. First one can be located inside of your WAMP taskbar icon here.

<a href="https://i.stack.imgur.com/GjJfG.png" rel="noreferrer"><img src="https://i.stack.imgur.com/GjJfG.png" alt="enter image description here"></a>

and the other one is located in <code>C:\wamp64\bin\php\php(Version)</code>

find the location for both of the <code>php.ini</code> files and find the line <code>curl.cainfo =</code> and give it a path like this

<code>curl.cainfo = "C:\wamp64\bin\php\php(Version)\extras\ssl\cacert.pem"</code>

Now save the files and restart your server and you should be good to go

blocks|key|2917832|text|这可能是一种边缘情况，但在我的情况下，问题不是客户端配置(我已经在php.ini中配置了curl.cainfo+)，而是远程服务器没有正确配置：|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|2917833|它没有在链中发送任何中间证书。使用Chrome浏览网站没有错误，但使用PHP时，我得到了以下错误。|2917834|2917835|+cURL错误60|blockquote|2917836|2917837|2917838|在将中间证书包含在远程the服务器配置中后，它可以正常工作。|2917839|您可以使用此站点检查服务器的SSL配置：|2917840|https://whatsmychaincert.com/|2917841|entityMap|0|LINK|mutability|MUTABLE|url^0|X|7|18|B|0|0|0|0|0|0|0|0|0|T|0|0^^$0|@$1|2|3|4|5|6|7|10|8|@$9|11|A|12|B|C]|$9|13|A|14|B|C]]|D|@]|E|$]]|$1|F|3|G|5|6|7|15|8|@]|D|@]|E|$]]|$1|H|3|-4|5|6|7|16|8|@]|D|@]|E|$]]|$1|I|3|J|5|K|7|17|8|@]|D|@]|E|$]]|$1|L|3|-4|5|6|7|18|8|@]|D|@]|E|$]]|$1|M|3|-4|5|6|7|19|8|@]|D|@]|E|$]]|$1|N|3|O|5|6|7|1A|8|@]|D|@]|E|$]]|$1|P|3|Q|5|6|7|1B|8|@]|D|@]|E|$]]|$1|R|3|S|5|6|7|1C|8|@]|D|@$9|1D|A|1E|1|1F]]|E|$]]|$1|T|3|-4|5|6|7|1G|8|@]|D|@]|E|$]]]|U|$V|$5|W|X|Y|E|$Z|S]]]]

This might be an edge case, but in my case the problem was not the client conf (I already had <code>curl.cainfo</code> configured in <code>php.ini</code>), but rather the remote server not being configured properly: 

It did not send any intermediate certs in the chain. There was no error browsing the site using Chrome, but with PHP I got following error.

<blockquote>
 cURL error 60
</blockquote>

After including the Intermediate Certs in the remote webserver configuration it worked.

You can use this site to check the SSL configuration of your server: 

<a href="https://whatsmychaincert.com/" rel="nofollow noreferrer">https://whatsmychaincert.com/</a>

blocks|key|2917843|text|当我运行'var_dump(php_ini_loaded_file());'时，在我的页面'C:\Development\bin\apache\apache2.4.33\bin\php.ini'+(length=50)'上得到以下输出|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|2917844|为了让php加载我的证书文件，我必须编辑路径'C:\Development\bin\apache\apache2.4.33\bin\php.ini'中的php.ini，并在我下载的位置添加openssl.cafile="C:/Development/bin/php/php7.2.4/extras/ssl/cacert.pem"，然后将我的证书文件从https://curl.haxx.se/docs/caextract.html放入。|2917845|我使用的是windows+10，使用的是drupal+8、wamp和php7.2.4|2917846|entityMap|0|LINK|mutability|MUTABLE|url|https://curl.haxx.se/docs/caextract.html^0|4|Y|19|1T|0|M|1G|2M|1Y|4V|14|0|0|0^^$0|@$1|2|3|4|5|6|7|R|8|@$9|S|A|T|B|C]|$9|U|A|V|B|C]]|D|@]|E|$]]|$1|F|3|G|5|6|7|W|8|@$9|X|A|Y|B|C]|$9|Z|A|10|B|C]]|D|@$9|11|A|12|1|13]]|E|$]]|$1|H|3|I|5|6|7|14|8|@]|D|@]|E|$]]|$1|J|3|-4|5|6|7|15|8|@]|D|@]|E|$]]]|K|$L|$5|M|N|O|E|$P|Q]]]]

when I run <code>'var_dump(php_ini_loaded_file());'</code>
I get this output on my page
<code>'C:\Development\bin\apache\apache2.4.33\bin\php.ini' (length=50)'</code>

and to get php to load my cert file I had to edit the php.ini in this path <code>'C:\Development\bin\apache\apache2.4.33\bin\php.ini'</code>
and add <code>openssl.cafile="C:/Development/bin/php/php7.2.4/extras/ssl/cacert.pem"</code> where I had downloaded and place my cert file from <a href="https://curl.haxx.se/docs/caextract.html" rel="nofollow noreferrer">https://curl.haxx.se/docs/caextract.html</a>

am on windows 10, using drupal 8, wamp and php7.2.4

blocks|key|2917971|text|type|unstyled|depth|inlineStyleRanges|entityRanges|data|2917972|2917973|在版本低于5.6的Guzzle中，它将使用自己的cacert.pem文件，但在更高版本的PHP中，它将使用系统的cacert.pem文件。|2917974|2917975|在Guzzles+StreamHandler.php文件https://github.com/guzzle/guzzle/blob/0773d442aa96baf19d7195f14ba6e9c2da11f8ed/src/Handler/StreamHandler.php#L437中找到答案|offset|length|2917976|2917977|+++++//+PHP+5.6+or+greater+will+find+the+system+cert+by+default.+When+++++++++//+<+5.6,+use+the+Guzzle+bundled+cacert.|blockquote|2917978|2917979|entityMap|0|LINK|mutability|MUTABLE|url|https://github.com/guzzle/guzzle/blob/0773d442aa96baf19d7195f14ba6e9c2da11f8ed/src/Handler/StreamHandler.php#L437^0|0|0|0|0|S|35|0|0|0|0|0^^$0|@$1|2|3|-4|4|5|6|V|7|@]|8|@]|9|$]]|$1|A|3|-4|4|5|6|W|7|@]|8|@]|9|$]]|$1|B|3|C|4|5|6|X|7|@]|8|@]|9|$]]|$1|D|3|-4|4|5|6|Y|7|@]|8|@]|9|$]]|$1|E|3|F|4|5|6|Z|7|@]|8|@$G|10|H|11|1|12]]|9|$]]|$1|I|3|-4|4|5|6|13|7|@]|8|@]|9|$]]|$1|J|3|K|4|L|6|14|7|@]|8|@]|9|$]]|$1|M|3|-4|4|5|6|15|7|@]|8|@]|9|$]]|$1|N|3|-4|4|5|6|16|7|@]|8|@]|9|$]]]|O|$P|$4|Q|R|S|9|$T|U]]]]

I spent too much time to figure out this problem for me.

I had PHP version 5.5 and I needed to upgrade to 5.6.

In versions &lt; 5.6 Guzzle will use it's own cacert.pem file, but in higher versions of PHP it will use system's cacert.pem file.

I also downloaded file from here <a href="https://curl.haxx.se/docs/caextract.html" rel="nofollow noreferrer">https://curl.haxx.se/docs/caextract.html</a> and set it in php.ini.

Answer found in Guzzles StreamHandler.php file <a href="https://github.com/guzzle/guzzle/blob/0773d442aa96baf19d7195f14ba6e9c2da11f8ed/src/Handler/StreamHandler.php#L437" rel="nofollow noreferrer">https://github.com/guzzle/guzzle/blob/0773d442aa96baf19d7195f14ba6e9c2da11f8ed/src/Handler/StreamHandler.php#L437</a>

<blockquote>
<pre><code> // PHP 5.6 or greater will find the system cert by default. When
 // &lt; 5.6, use the Guzzle bundled cacert.
</code></pre>
</blockquote>

blocks|key|2705337|text|所有的答案都是正确的，，但最重要的是，你必须找到正确的php.ini文件。在cmd+中检查此命令“php+--ini”不是用于查找正确php.ini文件的正确答案。|type|unstyled|depth|inlineStyleRanges|offset|length|style|BOLD|entityRanges|data|2705338|如果您编辑|2705339|curl.cainfo+="PATH/cacert.pem"|code-block|syntax|javascript|2705340|和复选|2705341|var_dump(openssl_get_cert_locations());+|2705342|那么curl.cainfo应该有一个值。如果不是，那么这不是正确的php.ini文件；|2705343|*我建议你在wamp/bin或xxamp/bin或任何你使用的服务器中搜索*.ini，并逐个更改并检查它们。*|2705344|entityMap^0|B|1Z|0|0|5|0|0|0|3|0|0|0|17|0|0|1J|0^^$0|@$1|2|3|4|5|6|7|W|8|@$9|X|A|Y|B|C]]|D|@]|E|$]]|$1|F|3|G|5|6|7|Z|8|@$9|10|A|11|B|C]]|D|@]|E|$]]|$1|H|3|I|5|J|7|12|8|@]|D|@]|E|$K|L]]|$1|M|3|N|5|6|7|13|8|@$9|14|A|15|B|C]]|D|@]|E|$]]|$1|O|3|P|5|J|7|16|8|@]|D|@]|E|$K|L]]|$1|Q|3|R|5|6|7|17|8|@$9|18|A|19|B|C]]|D|@]|E|$]]|$1|S|3|T|5|6|7|1A|8|@$9|1B|A|1C|B|C]]|D|@]|E|$]]|$1|U|3|-4|5|6|7|1D|8|@]|D|@]|E|$]]]|V|$]]

All of the answers are correct ; but the most important thing is You have to find the right php.ini file. 
check this command in cmd " php --ini " is not the right answer for finding the right php.ini file.

if you edit

<pre><code>curl.cainfo ="PATH/cacert.pem"
</code></pre>

and check

<pre><code>var_dump(openssl_get_cert_locations()); 
</code></pre>

then curl.cainfo should have a value. if not then that's not right php.ini file;

*I recommend you to search *.ini in wamp/bin or xxamp/bin or any server you use and change them one by one and check it. *

blocks|key|2918015|text|我对这个问题有一个恰当的解决方案，让我们试着了解这个问题的根本原因。当无法使用系统证书库中的根证书验证远程服务器ssl时，或者远程ssl未随链证书一起安装时，就会出现此问题。如果您有一个具有root+ssh访问权限的linux系统，那么在这种情况下，您可以尝试使用以下命令更新您的证书库：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|2918016|update-ca-certificates|offset|length|style|BOLD|CODE|2918017|如果仍然不起作用，则需要在证书存储中添加远程服务器的根证书和临时证书。您可以下载根证书和中间证书并将它们添加到/usr/local/share/ca-certificates目录中，然后运行命令update-ca-certificates.这应该能起到作用。同样，对于windows，您可以搜索如何添加根证书和中间证书。|2918018|解决此问题的另一种方法是要求远程服务器团队将ssl证书作为域根证书、中间证书和根证书的捆绑添加。|2918019|entityMap^0|0|0|M|0|M|0|1J|W|2P|M|2P|M|0|0^^$0|@$1|2|3|4|5|6|7|O|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|P|8|@$D|Q|E|R|F|G]|$D|S|E|T|F|H]]|9|@]|A|$]]|$1|I|3|J|5|6|7|U|8|@$D|V|E|W|F|G]|$D|X|E|Y|F|G]|$D|Z|E|10|F|H]]|9|@]|A|$]]|$1|K|3|L|5|6|7|11|8|@]|9|@]|A|$]]|$1|M|3|-4|5|6|7|12|8|@]|9|@]|A|$]]]|N|$]]

I have a proper solution of this problem, lets try and understand the root cause of this issue. This issue comes when remote servers ssl cannot be verified using root certificates in your system's certificate store or remote ssl is not installed along with chain certificates. If you have a linux system with root ssh access, then in this case you can try updating your certificate store with below command:

<code>update-ca-certificates</code>

If still, it doesn't work then you need to add root and interim certificate of remote server in your cert store. You can download root and intermediate certs and add them in /usr/local/share/ca-certificates directory and then run command <code>update-ca-certificates</code>. This should do the trick. Similarly for windows you can search how to add root and intermediate cert.

The other way you can solve this problem is by asking remote server team to add ssl certificate as a bundle of domain root cert, intermediate cert and root cert.

blocks|key|138575|text|对于WAMP来说，这就是最终对我起作用的东西。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|138576|虽然它与其他解决方案类似，但本页面上提到的解决方案以及web上的其他位置都不起作用。一些“次要”细节有所不同。|138577|保存PEM文件的位置很重要，但指定得不够清楚。|138578|或者要编辑的php.ini文件不正确。或者两者都有。|offset|length|style|CODE|138579|我正在Windows10机器上运行2020年的WAMP+3.2.0安装。|138580|获取pem文件的链接：|138581|http://curl.haxx.se/ca/cacert.pem|138582|复制整个页面并将其另存为：cacert.pem，位于下面提到的位置。|138583|将PEM文件保存在此位置|138584|<wamp+install+directory>\bin\php\php<version>\extras\ssl|138585|例如保存的文件和路径："T:\wamp64\bin\php\php7.3.12\extras\ssl\cacert.pem“|138586|*(我最初将它保存在其他地方(并在php.ini文件中指出了保存的位置，但这不起作用)。可能有，也可能没有，其他位置也可以工作。这是推荐的位置-我不知道为什么。)|138587|哪里|138588|<wamp+install+directory>+=+WAMP安装的路径。|138589|例如：T:\wamp64\|138590|WAMP正在运行的php的<php+version>：(要找到答案，请转到：WAMP+icon+tray+->++PHP+++<version+number>|138591|如果显示的版本号为7.3.12，则目录为:+php7.3.12)|138592|例如：php7.3.12|138593|要编辑的php.ini文件|138594|要打开适当的php.ini文件进行编辑，请转到：WAMP+icon+tray+->++PHP+->+php.ini。|138595|例如：T:\wamp64\bin\apache\apache2.4.41\bin\php.ini|138596|注意:它不是php目录中的文件！|138597|更新：|BOLD|138598|虽然看起来我正在编辑文件：T:\wamp64\bin\apache\apache2.4.41\bin\php.ini，|138599|它实际上是在编辑该文件的符号链接目标：T:/wamp64/bin/php/php7.3.12/phpForApache.ini。|138600|请注意，如果您遵循上述说明，则不会直接编辑php.ini文件。您实际上正在编辑phpForApache.ini文件。(一篇关于symlinks的帖子)|138601|如果您阅读各种WAMP目录中一些php.ini文件顶部的注释，它会特别说明不要编辑该特定文件。|138602|请确保您打开进行编辑的文件不包含此警告。|138603|安装扩展Link+Shell+Extension后，我可以通过添加的选项卡在文件属性窗口中查看符号链接的目标。这是我的一个SO+answer，里面有关于这个扩展的更多信息。|138604|如果您在不同的时间运行不同版本的php，您可能需要将PEM文件保存在每个相关的php目录中。|138605|要在php.ini文件中进行的编辑：|138606|将PEM文件的路径粘贴到以下位置。|138607|138608|取消注释;curl.cainfo+=并粘贴到您的PEM文件的路径中。|unordered-list-item|138609|138610|例如：curl.cainfo+=+"T:\wamp64\bin\php\php7.3.12\extras\ssl\cacert.pem"|138611|138612|取消注释;openssl.cafile=并粘贴到您的PEM文件的路径中。|138613|138614|例如：openssl.cafile="T:\wamp64\bin\php\php7.3.12\extras\ssl\cacert.pem"|138615|致谢：|138616|虽然不是官方资源，但这里有一个指向YouTube视频的链接，它为我理清了最后的细节：。|138617|entityMap|0|LINK|mutability|MUTABLE|url|1|https://www.techrepublic.com/article/how-to-take-advantage-of-symbolic-links-in-window-10/|2|https://schinagl.priv.at/nt/hardlinkshellext/hardlinkshellext.html|3|https://stackoverflow.com/questions/10188485/windows-symbolic-link-target/64229813#64229813^0|0|0|0|6|7|0|0|0|0|X|0|0|D|A|0|0|0|1K|0|0|0|0|0|O|0|3|A|0|D|D|12|15|0|0|3|9|0|0|6|7|O|X|0|3|19|0|0|0|3|0|D|19|0|J|18|0|L|7|13|G|1R|8|1|0|G|7|0|0|4|K|2|1P|9|3|0|0|0|0|0|4|E|0|0|3|1T|0|0|4|G|0|0|3|1U|0|0|3|0|0^^$0|@$1|2|3|4|5|6|7|30|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|31|8|@]|9|@]|A|$]]|$1|D|3|E|5|6|7|32|8|@]|9|@]|A|$]]|$1|F|3|G|5|6|7|33|8|@$H|34|I|35|J|K]]|9|@]|A|$]]|$1|L|3|M|5|6|7|36|8|@]|9|@]|A|$]]|$1|N|3|O|5|6|7|37|8|@]|9|@]|A|$]]|$1|P|3|Q|5|6|7|38|8|@]|9|@$H|39|I|3A|1|3B]]|A|$]]|$1|R|3|S|5|6|7|3C|8|@$H|3D|I|3E|J|K]]|9|@]|A|$]]|$1|T|3|U|5|6|7|3F|8|@]|9|@]|A|$]]|$1|V|3|W|5|6|7|3G|8|@$H|3H|I|3I|J|K]]|9|@]|A|$]]|$1|X|3|Y|5|6|7|3J|8|@]|9|@]|A|$]]|$1|Z|3|10|5|6|7|3K|8|@]|9|@]|A|$]]|$1|11|3|12|5|6|7|3L|8|@]|9|@]|A|$]]|$1|13|3|14|5|6|7|3M|8|@$H|3N|I|3O|J|K]]|9|@]|A|$]]|$1|15|3|16|5|6|7|3P|8|@$H|3Q|I|3R|J|K]]|9|@]|A|$]]|$1|17|3|18|5|6|7|3S|8|@$H|3T|I|3U|J|K]|$H|3V|I|3W|J|K]]|9|@]|A|$]]|$1|19|3|1A|5|6|7|3X|8|@]|9|@]|A|$]]|$1|1B|3|1C|5|6|7|3Y|8|@$H|3Z|I|40|J|K]]|9|@]|A|$]]|$1|1D|3|1E|5|6|7|41|8|@]|9|@]|A|$]]|$1|1F|3|1G|5|6|7|42|8|@$H|43|I|44|J|K]|$H|45|I|46|J|K]]|9|@]|A|$]]|$1|1H|3|1I|5|6|7|47|8|@$H|48|I|49|J|K]]|9|@]|A|$]]|$1|1J|3|1K|5|6|7|4A|8|@]|9|@]|A|$]]|$1|1L|3|1M|5|6|7|4B|8|@$H|4C|I|4D|J|1N]]|9|@]|A|$]]|$1|1O|3|1P|5|6|7|4E|8|@$H|4F|I|4G|J|K]]|9|@]|A|$]]|$1|1Q|3|1R|5|6|7|4H|8|@$H|4I|I|4J|J|K]]|9|@]|A|$]]|$1|1S|3|1T|5|6|7|4K|8|@$H|4L|I|4M|J|K]|$H|4N|I|4O|J|K]]|9|@$H|4P|I|4Q|1|4R]]|A|$]]|$1|1U|3|1V|5|6|7|4S|8|@$H|4T|I|4U|J|K]]|9|@]|A|$]]|$1|1W|3|1X|5|6|7|4V|8|@]|9|@]|A|$]]|$1|1Y|3|1Z|5|6|7|4W|8|@]|9|@$H|4X|I|4Y|1|4Z]|$H|50|I|51|1|52]]|A|$]]|$1|20|3|21|5|6|7|53|8|@]|9|@]|A|$]]|$1|22|3|23|5|6|7|54|8|@]|9|@]|A|$]]|$1|24|3|25|5|6|7|55|8|@]|9|@]|A|$]]|$1|26|3|-4|5|6|7|56|8|@]|9|@]|A|$]]|$1|27|3|28|5|29|7|57|8|@$H|58|I|59|J|K]]|9|@]|A|$]]|$1|2A|3|-4|5|6|7|5A|8|@]|9|@]|A|$]]|$1|2B|3|2C|5|6|7|5B|8|@$H|5C|I|5D|J|K]]|9|@]|A|$]]|$1|2D|3|-4|5|6|7|5E|8|@]|9|@]|A|$]]|$1|2E|3|2F|5|29|7|5F|8|@$H|5G|I|5H|J|K]]|9|@]|A|$]]|$1|2G|3|-4|5|6|7|5I|8|@]|9|@]|A|$]]|$1|2H|3|2I|5|6|7|5J|8|@$H|5K|I|5L|J|K]]|9|@]|A|$]]|$1|2J|3|2K|5|6|7|5M|8|@$H|5N|I|5O|J|1N]]|9|@]|A|$]]|$1|2L|3|2M|5|6|7|5P|8|@]|9|@]|A|$]]|$1|2N|3|-4|5|6|7|5Q|8|@]|9|@]|A|$]]]|2O|$2P|$5|2Q|2R|2S|A|$2T|Q]]|2U|$5|2Q|2R|2S|A|$2T|2V]]|2W|$5|2Q|2R|2S|A|$2T|2X]]|2Y|$5|2Q|2R|2S|A|$2T|2Z]]]]

For WAMP, this is what finally worked for me. 
While it is similar to others, the solutions mentioned on this page, and other locations on the web did not work. Some &quot;minor&quot; detail differed. 
Either the location to save the PEM file mattered, but was not specified clearly enough. 
Or WHICH <code>php.ini</code> file to be edited was incorrect. Or both. 
I'm running a 2020 installation of WAMP 3.2.0 on a Windows 10 machine.
<h3>Link to get the pem file:</h3>
<a href="http://curl.haxx.se/ca/cacert.pem" rel="noreferrer">http://curl.haxx.se/ca/cacert.pem</a> 
Copy the entire page and save it as: <code>cacert.pem</code>, in the location mentioned below.
<h3>Save the PEM file in this location</h3>
<code>&lt;wamp install directory&gt;\bin\php\php&lt;version&gt;\extras\ssl</code> 
eg saved file and path: &quot;T:\wamp64\bin\php\php7.3.12\extras\ssl\cacert.pem&quot;
*(I had originally saved it elsewhere (and indicated the saved location in the php.ini file, but that did not work).
There might, or might not be, other locations also work. This was the recommended location - I do not know why.)
WHERE 
<code>&lt;wamp install directory&gt;</code> = path to your WAMP installation. 
eg: <code>T:\wamp64\</code>
<code>&lt;php version&gt;</code> of php that WAMP is running: (to find out, goto: <code>WAMP icon tray -&gt; PHP &lt;version number&gt;</code> 
if the version number shown is 7.3.12, then the directory would be: php7.3.12) 
eg: <code>php7.3.12</code>
<h3>Which php.ini file to edit</h3>
To open the proper <code>php.ini</code> file for editing, goto: <code>WAMP icon tray -&gt; PHP -&gt; php.ini</code>. 
eg: <code>T:\wamp64\bin\apache\apache2.4.41\bin\php.ini</code> 
NOTE: it is NOT the file in the php directory!
Update: 
While it looked like I was editing the file: <code>T:\wamp64\bin\apache\apache2.4.41\bin\php.ini</code>, 
it was actually editing that file's symlink target: <code>T:/wamp64/bin/php/php7.3.12/phpForApache.ini</code>.
Note that if you follow the above directions, you are NOT editing a <code>php.ini</code> file directly. You are actually editing a <code>phpForApache.ini</code> file. (a post with info about <a href="https://www.techrepublic.com/article/how-to-take-advantage-of-symbolic-links-in-window-10/" rel="noreferrer">symlinks</a>)
If you read the comments at the top of some of the <code>php.ini</code> files in various WAMP directories, it specifically states to NOT EDIT that particular file. 
Make sure that the file you do open for editing does not include this warning.
Installing the extension <a href="https://schinagl.priv.at/nt/hardlinkshellext/hardlinkshellext.html" rel="noreferrer">Link Shell Extension</a> allowed me to see the target of the symlink in the file Properites window, via an added tab. here is an <a href="https://stackoverflow.com/questions/10188485/windows-symbolic-link-target/64229813#64229813">SO answer</a> of mine with more info about this extension.
If you run various versions of php at various times, you may need to save the PEM file in each relevant php directory.
<h3>The edits to make in your php.ini file:</h3>
Paste the path to your PEM file in the following locations.
<ul>
<li>uncomment <code>;curl.cainfo =</code> and paste in the path to your PEM file. 
eg: <code>curl.cainfo = &quot;T:\wamp64\bin\php\php7.3.12\extras\ssl\cacert.pem&quot;</code>
</li>
<li>uncomment <code>;openssl.cafile=</code> and paste in the path to your PEM file. 
eg: <code>openssl.cafile=&quot;T:\wamp64\bin\php\php7.3.12\extras\ssl\cacert.pem&quot;</code>
</li>
</ul>
Credits:
While not an official resource, here is a link back to the YouTube video that got the last of the details straightened out for me: <a href="https://www.youtube.com/watch?v=Fn1V4yQNgLs" rel="noreferrer">https://www.youtube.com/watch?v=Fn1V4yQNgLs</a>.

blocks|key|138646|text|我使用的是Centos+7和免费版本的virtualmin。使用Virtualmin，你可以创建一个wordpress网站。有功能将自动更新您的ssl证书为您。我注意到/etc/httpd/conf/httpd.conf没有包含SSLCertificateChainFile.条目应该将其设置为类似于/home/websitename/ssl.composed的内容。相应地更新该文件并重新启动apache为我解决了这个问题。我在尝试为wordpress安装一个jetpack插件时发现了我的问题。在互联网上的搜索让我意识到I+didn't+have+SSL+Configured。我跟随Redhat's+instructions学习了如何安装证书。我希望这对某些人有用。|type|unstyled|depth|inlineStyleRanges|offset|length|style|BOLD|entityRanges|data|138647|entityMap|0|LINK|mutability|MUTABLE|url|https://wordpress.org/support/topic/jetpack-cannot-connect-curl-error-60-ssl-certificate-problem/|1|https://access.redhat.com/solutions/43575^0|2C|Q|36|N|7A|S|0|86|L|1|0^^$0|@$1|2|3|4|5|6|7|P|8|@$9|Q|A|R|B|C]|$9|S|A|T|B|C]]|D|@$9|U|A|V|1|W]|$9|X|A|Y|1|Z]]|E|$]]|$1|F|3|-4|5|6|7|10|8|@]|D|@]|E|$]]]|G|$H|$5|I|J|K|E|$L|M]]|N|$5|I|J|K|E|$L|O]]]]

I'm using Centos 7 with the free version of virtualmin. With Virtualmin you can create a wordpress website. There is functionality that will automatically update your ssl certificate for you. I noticed that /etc/httpd/conf/httpd.conf did not contain an entry for SSLCertificateChainFile. Which should be set to something like /home/websitename/ssl.combined. Updating that file accordingly and restarting apache fix this problem for me. I discovered my issue trying to install a jetpack plugin for wordpress. A search on the internet led me to realize that <a href="https://wordpress.org/support/topic/jetpack-cannot-connect-curl-error-60-ssl-certificate-problem/" rel="nofollow noreferrer">I didn't have SSL Configured</a>. I followed <a href="https://access.redhat.com/solutions/43575" rel="nofollow noreferrer">Redhat's instructions</a> on how to install a certificate. I hope this was useful to someone.

blocks|key|2918148|text|Guzzle版本5|type|unstyled|depth|inlineStyleRanges|offset|length|style|BOLD|entityRanges|data|2918149|这个默认配置对我来说很好用。它将禁用所需的https。|2918150|++$options+=+[
++++'defaults'+=>+['verify'+=>+false],
++];
++new+GuzzleClient($options);|code-block|syntax|javascript|2918151|在其他情况下，您想要设置ca路径，请更改为：|2918152|['verify'+=>+'/path/to/cacert.pem']|2918153|entityMap^0|0|9|0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|S|8|@$9|T|A|U|B|C]]|D|@]|E|$]]|$1|F|3|G|5|6|7|V|8|@]|D|@]|E|$]]|$1|H|3|I|5|J|7|W|8|@]|D|@]|E|$K|L]]|$1|M|3|N|5|6|7|X|8|@]|D|@]|E|$]]|$1|O|3|P|5|J|7|Y|8|@]|D|@]|E|$K|L]]|$1|Q|3|-4|5|6|7|Z|8|@]|D|@]|E|$]]]|R|$]]

Guzzle Version 5
This default config is working good for mine. It will disable https required.
<pre><code> $options = [
 'defaults' =&gt; ['verify' =&gt; false],
 ];
 new GuzzleClient($options);
</code></pre>
In other case, you want to set path of ca, change to:
<pre><code>['verify' =&gt; '/path/to/cacert.pem']
</code></pre>

blocks|key|2918184|text|对于那些试图在您的本地计算机上使用Wordpress的应用程序密码功能的人。您需要更新wp-includes\certificates\ca-bundle.crt|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|2918185|在文本编辑器中打开此文件，并附加服务器的证书。|2918186|2918187|打开自签名证书(.crt)文件和|ordered-list-item|2918188|2918189|2918190|在|2918191|之间复制所有内容(包括|2918192|-开始证书-|BOLD|2918193|-结束证书-|2918194|在wp-includes\certificates\ca-bundle.crt末尾粘贴|2918195|2918196|2918197|entityMap^0|17|12|0|0|0|0|0|0|0|0|0|6|0|0|6|0|1|12|0|0|0^^$0|@$1|2|3|4|5|6|7|12|8|@$9|13|A|14|B|C]]|D|@]|E|$]]|$1|F|3|G|5|6|7|15|8|@]|D|@]|E|$]]|$1|H|3|-4|5|6|7|16|8|@]|D|@]|E|$]]|$1|I|3|J|5|K|7|17|8|@]|D|@]|E|$]]|$1|L|3|-4|5|6|7|18|8|@]|D|@]|E|$]]|$1|M|3|-4|5|6|7|19|8|@]|D|@]|E|$]]|$1|N|3|O|5|K|7|1A|8|@]|D|@]|E|$]]|$1|P|3|Q|5|6|7|1B|8|@]|D|@]|E|$]]|$1|R|3|S|5|6|7|1C|8|@$9|1D|A|1E|B|T]]|D|@]|E|$]]|$1|U|3|V|5|6|7|1F|8|@$9|1G|A|1H|B|T]]|D|@]|E|$]]|$1|W|3|X|5|6|7|1I|8|@$9|1J|A|1K|B|C]]|D|@]|E|$]]|$1|Y|3|-4|5|K|7|1L|8|@]|D|@]|E|$]]|$1|Z|3|-4|5|6|7|1M|8|@]|D|@]|E|$]]|$1|10|3|-4|5|6|7|1N|8|@]|D|@]|E|$]]]|11|$]]

For those of you who are trying to use Wordpress's application password functionality on your local machine. You need to update the <code>wp-includes\certificates\ca-bundle.crt</code>
<h2>Open this file in a text editor and append your server's certificate.</h2>
<ol>
<li>Open your self-signed certificate(.crt) file and
</li>
<li>Copy all between and including
</li>
</ol>
----BEGIN CERTIFICATE-----
-----END CERTIFICATE-----
<ol start="3">
<li>Paste at the end of the <code>wp-includes\certificates\ca-bundle.crt</code></li>
</ol>

I am trying to send an API request using Stripe but get the error message:
<blockquote>
cURL error 60: SSL certificate problem: unable to get local issuer certificate
</blockquote>
This is the code I am running:
<pre><code>public function chargeStripe()
{
 $stripe = new Stripe;
 $stripe = Stripe::make(env('STRIPE_PUBLIC_KEY'));

 $charge = $stripe-&gt;charges()-&gt;create([
 'amount' =&gt; 2900,
 'customer' =&gt; Input::get('stripeEmail'),
 'currency' =&gt; 'EUR',
 ]);

 return Redirect::route('step1');
}
</code></pre>
I searched a lot on Google and lots of people are suggesting that I download this file: <a href="http://curl.haxx.se/ca/cacert.pem" rel="nofollow noreferrer">cacert.pem</a>, put it somewhere and reference it in my php.ini. This is the part in my php.ini:
<pre><code>curl.cainfo = &quot;C:\Windows\cacert.pem&quot;
</code></pre>
Yet, even after restarting my server several times and changing the path, I get the same error message.
I have the ssl_module enabled in Apache, and I have php_curl enabled in my <code>php.ini</code>.
I have also tried this fix: <a href="http://flwebsites.biz/posts/how-fix-curl-error-60-ssl-issue" rel="nofollow noreferrer">How to fix PHP CURL Error 60 SSL</a>
Which suggests that I add these lines to my cURL options:
<pre><code>curl_setopt($process, CURLOPT_CAINFO, dirname(__FILE__) . '/cacert.pem');
curl_setopt($process, CURLOPT_SSL_VERIFYPEER, true);
</code></pre>
Where do I add options to my cURL? Apparently not through the command line, since my CLI doesn't find the command &quot;curl_setopt&quot;

cURL error 60: SSL certificate: unable to get local issuer certificate

文件系统

服务器

Windows

FreeBSD

CentOS

Ubuntu

Fedora

Debian

Linux

Unix

我正在尝试使用条带发送API请求，但收到错误消息： cURL错误60: SSL证书问题:无法获取本地颁发者证书这是我正在运行的代码：public function chargeStripe(){    $stripe = new Stripe;    $stripe = Stripe::make(env('STRIPE...

问cURL错误60: SSL证书:无法获取本地颁发者证书
EN

社区

活动

资源

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问cURL错误60: SSL证书:无法获取本地颁发者证书EN

社区

活动

资源

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问cURL错误60: SSL证书:无法获取本地颁发者证书
EN