Unable to enable crypto on TCP connection api.mysite.com on Zend

Question

I was creating a module application for Zend Framework 2. When I try to send a post request to my server with the necessary details, I get the error "Unable to enable crypto on TCP connection api.mysite.com". Earlier, I was getting the error "Unable to enable crypto on TCP connection api.mysite.com: make sure the "sslcafile" or "sslcapath" option are properly set for the environment."

On googling, I found I should set sslverifypeer to false. After doing this, I was left with the 1st part of the sentence "Unable to enable crypto on TCP connection api.mysite.com." Not getting idea where I could be wrong.

Under previous exceptions, I get "stream_socket_enable_crypto(): this stream does not support SSL/crypto"

I had the same problem and found this when searching. In my case, I had to somehow set the ZendOAuth cURL adapter parameters, [here's how I did it](http://stackoverflow.com/a/41408933/722036). — ᴍᴇʜᴏᴠ, Dec 31 '16 at 14:02

score 1 · Answer 1 · answered Jun 19 '14 at 10:28

1

Please see this note in the docs: http://framework.zend.com/manual/2.3/en/modules/zend.http.client.html#connecting-to-ssl-urls . You shouldn't set sslverifypeer unless the site you're connecting to doesn't have a valid SSL certificate. Instead, set sslcapath as the error suggests. This gives PHP a way of validating the SSL certificate supplied by the host you're connecting to.

answered Jun 19 '14 at 10:28

Tim Fountain

33,093
5
41
69

1

Hey! But how do I set the path for it? Where are the certificates stored? – user2740957 Jun 19 '14 at 11:13
That depends on your OS. `/etc/ssl/certs` is correct for Ubuntu, but I'm not sure about others. – Tim Fountain Jun 19 '14 at 11:50

score 1 · Answer 2 · answered Jul 15 '15 at 04:22

This is due to your site trying to communicate with a ssl used site. If you want to use default adapterZend\Http\Client\Adapter\Socket you have to define sslcapath configuration option in order to allow PHP to validate the SSL certificate. To avoid this I used the curl adapter instead.

    $client = new Client();
    $client->setUri($endPointUrl);

    $options = array('put your options'); 

    $client->setOptions($options);
    $client->setAdapter('Zend\Http\Client\Adapter\Curl');
    $response = $client->send();

Doc : http://framework.zend.com/manual/current/en/modules/zend.http.client.html

score 0 · Answer 3 · answered Jul 11 '16 at 19:10

You need to set Http Client Options.

Here is the working setting:

// eko/FeedBundle and issue with ssl site -> https://github.com/eko/FeedBundle/issues/51
    $httpClientOptions = array(
        'adapter' => 'Zend\Http\Client\Adapter\Socket',
        'persistent' => false,
        'sslverifypeer' => false,
        'sslallowselfsigned' => false,
        'sslusecontext' => false,
        'ssl' => array(
            'verify_peer' => false,
            'allow_self_signed' => true,
            'capture_peer_cert' => true,
        ),
        'useragent' => 'Feed Reader',
    );
    ZendFeedReader::setHttpClient(new ZendHttpClient(null, $httpClientOptions));

Here is the NOT working setting:

// eko/FeedBundle and issue with ssl site -> https://github.com/eko/FeedBundle/issues/51
    $httpClientOptions = array(
        'adapter' => 'Zend\Http\Client\Adapter\Socket',
        'persistent' => false,
        'sslverifypeer' => false,
        'sslallowselfsigned' => true,
        'sslusecontext' => true,
        'ssl' => array(
            'verify_peer' => false,
            'allow_self_signed' => true,
            'capture_peer_cert' => true,
        ),
        'useragent' => 'Feed Reader',
    );
    ZendFeedReader::setHttpClient(new ZendHttpClient(null, $httpClientOptions));

Note: I have issue with symfony bundle eko/feedBundle that use Zend library so essentially it is the same for you.

this solution tested and proven to be working.

Unable to enable crypto on TCP connection api.mysite.com on Zend

3 Answers3