[kronolith] How to ignore ssl certificate related errors?

[Luis Felipe Marzagao]

Em 08-01-2013 09:07, Mehmet Giritli escreveu:
> On Fri, 2013-01-04 at 12:30 -0200, Luis Felipe Marzagao wrote:
>> Em 03-01-2013 17:10, Mehmet Giritli escreveu:
>>> Hi,
>>>
>>> Recently, one of the websites from which I use remote calendars decided
>>> to change the ssl certificate to a new one from an unknown issuer. This
>>> obviously generates an error at connection time. Horde says "SSL
>>> certificate problem: unable to get local issuer certificate".
>>>
>>> Most programs have settings for ignoring such errors and I had to turn
>>> on these settings for the apps that I use. However, I could not discover
>>> such a setting for horde and currently I can not use my remote calendars
>>> because of this. Is there a way to tell horde to ignore these errors?
>>>
>>> Best.
>>>
>> This guy solved by drastic (and ugly) means:
>>
>> http://bugs.horde.org/ticket/11822#c3
>>
>> Wouldn't importing the new certificates to your server be the best solution?
>>
>> Luis Felipe
> Thank you for your message Luis.
>
> Unfortunately, I could not solve it despite all my efforts. First of
> all, I am running Horde 4. I believe for this reason, I do not have the
> setting mentioned in the bug report. So that option is not applicable
> for me.
>
> For the alternative you mentioned, I think that the certificate used by
> the website is revoked or something like that. All the browsers, windows
> or linux, mention that the certificate is not signed by a trusted
> authority. But the CA certificates are already in /etc/ssl/certs. The
> website is this, you can have a look at their certificate:
>
> www.flogs.com
>
> What I tried was to export the certificate from the firefox and put it
> into /etc/ssl/certs directory and rehash. But it did not work.
>
> So have you got any more ideas for me? I can't use calendars with this
> problem and they are an important part of my setup.
>
> Thank you.
>

Have you tried installing pecl http? I was having trouble verifying 
certificates (but with horde 5 + ubuntu server) and pecl http has solved it.

On Ubuntu:

apt-get install libcurl4-openssl-dev
pecl install pecl_http

Luis Felipe