php curl Problem with the SSL CA cert (path? access rights?)

公司有台老服务器,搭的php的环境,有个负载均横的服务 调用 curl_init 的时候报了 Problem with the SSL CA cert (path? access rights?) 网上各类脑补

 

yum install ca-certificates yum reinstall ca-certificates

当我用 rpm -V ca-certificates 这个命令时的确没有输出

[root@app1 certs]# rpm -V ca-certificates [root@app1 certs]# ls Makefile ca-bundle.crt  ca-bundle.trust.crt  cacert.pem  make-dummy-cert  renew-dummy-cert [root@app1 certs]# mv ca-bundle.crt.bak mv: missing destination file operand after `ca-bundle.crt.bak' Try `mv --help' for more information.
[root@app1 certs]# mv ca-bundle.crt ca-bundle. ca-bundle.crt        ca-bundle.trust.crt [root@app1 certs]# mv ca-bundle.crt ca-bundle.crt.bak [root@app1 certs]# ls Makefile ca-bundle.crt.bak  ca-bundle.trust.crt  cacert.pem  make-dummy-cert  renew-dummy-cert [root@app1 certs]# mv cacert.pem ca-bundle.crt [root@app1 certs]# rpm -V ca-certificates S.5....T.  c /etc/pki/tls/certs/ca-bundle.crt

一阵命令如虎的操做,显示出来了

最后重启了一下 php-fpm

[root@app1 certs]# service php-fpm restart Restarting php-fpm daemon: php-fpm[19-Feb-2019 14:27:26] ERROR: unable to bind listening socket for address '10.47.97.153:9000': Address already in use (98) [19-Feb-2019 14:27:26] ERROR: FPM initialization failed already running.

发现报错了子,心都是慌的,这个大概是把 php-fpm 进程给干掉,而后 nginx 自动会启新的 php-fpm ,刷一变报502,刷2变就正常了

到此问题解决了,忽然仍是发现 docker 好,至少镜像出了问题,能够在镜像里面解决.

 

分别参考:

https://stackoverflow.com/questions/15135834/php-curl-curlopt-ssl-verifypeer-ignored#comment78570660_15237205

https://www.centos.org/forums/viewtopic.php?t=3711