alzander wrote: Giancarlo,
If you're seeing that message, it means the SSL root certificates are not up to date on your server. Without those certificates, your site is unable to validate the WindowsLive servers as authentic and the secure request is being denied. You'll need to contact your hosting provider to get the SSL certificates updated so that the following URL can be validated:
login.live.com/
I hope that helps get you going, but if you continue to run into issues, just let me know, and we'll gladly help however we can.
Thanks,
Alex
curl https://login.live.com/ -vSSL certificate problem, verify that the CA cert is OK. Details:alzander wrote: It's not *your* SSL certificate that needs to be validated. It's the SSL certificate from the login.live.com address that needs to be validated by your server. The message above indicates that your server is unable to validate *the Microsoft* SSL certificate.
From a command prompt, try running the following command:My guess is that you'll see something like:curl https://login.live.com/ -vThat's not going through the full PHP stack, so even if that works, it's not a guarantee it will work in PHP/Joomla. If that doesn't work though, it's a great indicator of the cause.SSL certificate problem, verify that the CA cert is OK. Details:
I hope that helps,
Alex
Code:
curl https://login.live.com/ -v
* About to connect() to login.live.com port 443 (#0)
* Trying 131.253.61.68...
* Adding handle: conn: 0x1a92db0
* Adding handle: send: 0
* Adding handle: recv: 0
* Curl_addHandleToPipeline: length: 1
* - Conn 0 (0x1a92db0) send_pipe: 1, recv_pipe: 0
* Connected to login.live.com (131.253.61.68) port 443 (#0)
* successfully set certificate verify locations:
* CAfile: /etc/pki/tls/certs/ca-bundle.crt
CApath: none
* SSLv3, TLS handshake, Client hello (1):
* SSLv3, TLS handshake, Server hello (2):
* SSLv3, TLS handshake, CERT (11):
* SSLv3, TLS handshake, Server key exchange (12):
* SSLv3, TLS handshake, Server finished (14):
* SSLv3, TLS handshake, Client key exchange (16):
* SSLv3, TLS change cipher, Client hello (1):
* SSLv3, TLS handshake, Finished (20):
* SSLv3, TLS change cipher, Client hello (1):
* SSLv3, TLS handshake, Finished (20):
* SSL connection using ECDHE-RSA-AES256-SHA384
* Server certificate:
* subject: 1.3.6.1.4.1.311.60.2.1.3=US; 1.3.6.1.4.1.311.60.2.1.2=Washington; businessCategory=Private Organization; serialNumber=600413485; C=US; postalCode=98052; ST=Washington; L=Redmond; street=1 Microsoft Way; O=Microsoft Corporation; OU=MSA; CN=login.live.com
* start date: 2013-10-23 00:00:00 GMT
* expire date: 2014-10-23 23:59:59 GMT
* subjectAltName: login.live.com matched
* issuer: C=US; O=VeriSign, Inc.; OU=VeriSign Trust Network; OU=Terms of use at https://www.verisign.com/rpa (c)06; CN=VeriSign Class 3 Extended Validation SSL SGC CA
* SSL certificate verify ok.
> GET / HTTP/1.1
> User-Agent: curl/7.30.0
> Host: login.live.com
> Accept: */*<?php
$url = 'https://login.live.com/';
$opts[CURLOPT_URL] = $url;
$opts[CURLOPT_SSL_VERIFYPEER] = true;
$opts[CURLOPT_VERBOSE] = true;
$opts[CURLOPT_RETURNTRANSFER] = 1;
$ch = curl_init();
curl_setopt_array($ch, $opts);
$result = curl_exec($ch);
$errno = curl_errno($ch);
echo "Error Number: " . $errno . "\n";That will take Joomla out of the equation, but will run the test using PHP's cURL configuration, which may different than the command line version.* About to connect() to login.live.com port 443 (#0)
* Trying 131.253.61.80...
* Adding handle: conn: 0x10280b800
* Adding handle: send: 0
* Adding handle: recv: 0
* Curl_addHandleToPipeline: length: 1
* - Conn 0 (0x10280b800) send_pipe: 1, recv_pipe: 0
* Connected to login.live.com (131.253.61.80) port 443 (#0)
* successfully set certificate verify locations:
* CAfile: /Applications/XAMPP/xamppfiles/share/curl/curl-ca-bundle.crt
CApath: none
* SSL connection using ECDHE-RSA-AES256-SHA384
* Server certificate:
* subject: 1.3.6.1.4.1.311.60.2.1.3=US; 1.3.6.1.4.1.311.60.2.1.2=Washington; businessCategory=Private Organization; serialNumber=600413485; C=US; postalCode=98052; ST=Washington; L=Redmond; street=1 Microsoft Way; O=Microsoft Corporation; OU=MSA; CN=login.live.com
* start date: 2013-10-23 00:00:00 GMT
* expire date: 2014-10-23 23:59:59 GMT
* subjectAltName: login.live.com matched
* issuer: C=US; O=VeriSign, Inc.; OU=VeriSign Trust Network; OU=Terms of use at www.verisign.com/rpa (c)06; CN=VeriSign Class 3 Extended Validation SSL SGC CA
* SSL certificate verify ok.
> GET / HTTP/1.1
Host: login.live.com
Accept: */*
.....
Error Number: 0
Join our newsletter to get alerts for Joomla releases, tips and tricks and extension updates.
