SSL certificate problem: unable to get local issuer certificate, must set CURLOPT_SSL_VERIFYPEER=0

[ortreum]

I can only connect with:

    curl_setopt($this->curlHandle, CURLOPT_SSL_VERIFYPEER, 0);

Without it I got this message:

    Failed connection to https://hbci11.fiducia.de/cgi-bin/hbciservlet: SSL certificate problem: unable to get local issuer certificate

You should add an SSLType parameter or set this line 0. Some might only allow connections via TLS 1.2.

Thx

[AlexH-HankIT]

This library should promote security by design, therefor disabling the certification verification or even making it possible to disable it is a very bad idea imho.

Which OS do you run? Your problem is most likely related to a missing certificate store. I'm not sure why you mentioned TLS 1.2.

[ortreum]

Ok you are right. Windows itself was the problem and still is. But on Linux it is working as it should.

SSL1 is not a good idea anymore imho too. See poodle and heart bleed attacks,