[kronolith] How to ignore ssl certificate related errors?

[Mehmet Giritli]

On Tue, 2013-01-08 at 21:28 -0200, Luis Felipe Marzagao wrote:
> Em 08-01-2013 09:07, Mehmet Giritli escreveu:
> > On Fri, 2013-01-04 at 12:30 -0200, Luis Felipe Marzagao wrote:
> >> Em 03-01-2013 17:10, Mehmet Giritli escreveu:
> >>> Hi,
> >>>
> >>> Recently, one of the websites from which I use remote calendars decided
> >>> to change the ssl certificate to a new one from an unknown issuer. This
> >>> obviously generates an error at connection time. Horde says "SSL
> >>> certificate problem: unable to get local issuer certificate".
> >>>
> >>> Most programs have settings for ignoring such errors and I had to turn
> >>> on these settings for the apps that I use. However, I could not discover
> >>> such a setting for horde and currently I can not use my remote calendars
> >>> because of this. Is there a way to tell horde to ignore these errors?
> >>>
> >>> Best.
> >>>
> >> This guy solved by drastic (and ugly) means:
> >>
> >> http://bugs.horde.org/ticket/11822#c3
> >>
> >> Wouldn't importing the new certificates to your server be the best solution?
> >>
> >> Luis Felipe
> > Thank you for your message Luis.
> >
> > Unfortunately, I could not solve it despite all my efforts. First of
> > all, I am running Horde 4. I believe for this reason, I do not have the
> > setting mentioned in the bug report. So that option is not applicable
> > for me.
> >
> > For the alternative you mentioned, I think that the certificate used by
> > the website is revoked or something like that. All the browsers, windows
> > or linux, mention that the certificate is not signed by a trusted
> > authority. But the CA certificates are already in /etc/ssl/certs. The
> > website is this, you can have a look at their certificate:
> >
> > www.flogs.com
> >
> > What I tried was to export the certificate from the firefox and put it
> > into /etc/ssl/certs directory and rehash. But it did not work.
> >
> > So have you got any more ideas for me? I can't use calendars with this
> > problem and they are an important part of my setup.
> >
> > Thank you.
> >
> 
> Have you tried installing pecl http? I was having trouble verifying 
> certificates (but with horde 5 + ubuntu server) and pecl http has solved it.

Yay...it worked. Thanks a lot.

Best.
> 
> On Ubuntu:
> 
> apt-get install libcurl4-openssl-dev
> pecl install pecl_http
> 
> Luis Felipe