cURL 58错误无法加载客户端密钥-8178 [英] cURL 58 error Unable to load client key -8178

查看：680 发布时间：2020/10/13 4:10:10 php ssl curl

本文介绍了cURL 58错误无法加载客户端密钥-8178的处理方法，对大家解决问题具有一定的参考价值，需要的朋友们下面随着小编来一起学习吧！

问题描述

在此处输入代码我正在尝试建立我的第一个ssl连接，但是我无法查明错误代码58无法加载的原因。

enter code hereI am trying to build me first ssl connection however i am unable to pinpoint what the reason is for error code 58 Unable to load.

我正在使用php curl来测试连接是否在使用代码中

i am using php curl to test the connection here is the code is use

$port = "443"; 

        $cert = getcwd() . "/controllers/ssl/certificate.pem";
        $testxml = "testset/npsLv01.xml";

        $headers = array(
            'Content-Type: text/xml; charset="utf-8"',
            'Content-Length: '.strlen($testxml),
            'Accept: text/xml',
            'Cache-Control: no-cache',
            'Pragma: no-cache',
            'SOAPAction: "Send"'
        ); 

        try {
        $ch = curl_init($testurl);

        if (FALSE === $ch)
            throw new Exception('failed to initialize');

        //curl opties om ssl verbinding op te zetten
        curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
        curl_setopt($ch, CURLOPT_SSLVERSION, 6);
        curl_setopt($ch, CURLOPT_SSLCERT, $cert);
        curl_setopt($ch, CURLOPT_PORT, $port);


        //post data afhandeling
        curl_setopt($ch, CURLOPT_CUSTOMREQUEST, "POST");
        curl_setopt($ch, CURLOPT_POSTFIELDS, $testxml);

        //headers voor het verwerken van de post
        curl_setopt($ch, CURLOPT_HTTPHEADER, $headers);

        //timeout settings
        curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
        curl_setopt($ch, CURLOPT_TIMEOUT, 10);

        //trying stuff out
        curl_setopt($ch, CURLOPT_NOBODY, true);
        curl_setopt($ch, CURLOPT_CERTINFO, true);
        curl_setopt($ch, CURLOPT_VERBOSE, 1);

        //exec de request
        $data = curl_exec($ch);

        if (FALSE === $data)
            throw new Exception(curl_error($ch), curl_errno($ch));

        } catch(Exception $e) {

            echo 'error code = ';
            echo $e->getCode();
            echo " error message = ";
            echo $e->getMessage();
            die;

        }
        var_dump($data); die;

当执行此代码时，出现以下错误：
错误代码= 58错误消息=无法加载客户端密钥-8178

when is exec this code i get the following error: error code = 58 error message = Unable to load client key -8178

推荐答案

通过将 CURLOPT_SSLCERT 设置为 / controllers / ssl / certificate.pem 将此文件设置为客户端应用于针对服务器进行身份验证的证书。在这种情况下，证书需要随附与服务器中的公钥匹配的私钥。但这不是，这就是为什么出现错误无法加载客户端密钥 。

By setting CURLOPT_SSLCERT to /controllers/ssl/certificate.pem you set this file up as the certificate the client should use to authenticate itself against the server. In this case the certificate needs to be accompanied with the private key matching the public key in the server. But, it doesn't and that's why you get the error "Unable to load client key".

使用证书文件的内容似乎对文件的用途有误解。该文件包含两个证书，其中第二个是公用名称为 *。ijsselgemeenten.nl 的服务器的叶证书，而第一个是该证书的颁发此证书的子CA RapidSSL SHA256 CA-G3 。我的猜测是这些不应该用作客户端证书，而应该是客户端应该期望的服务器证书。

After the question was edited with the contents of the certificate file it looks like that there is a misunderstanding of the purpose of the file. The file consists of two certificates, where the second on is the leaf certificate for a server with a common name of *.ijsselgemeenten.nl while the first one is the certificate for the sub-CA which issued this certificate RapidSSL SHA256 CA - G3. My guess is that these should not be used as client certificates but that this is the server certificate which should get expected by the client.

在这种情况下：

CURLOPT_SSL_VERIFYPEER 不应设置为false，因为应该验证服务器

CURLOPT_SSLCERT 不应设置，因为不应该使用客户端证书进行身份验证

如果同时使用服务器CA和本地CA商店已正确设置，现在应该可以使用了。如果不是这样（即在服务器上缺少子CA），则可以尝试设置 CURLOPT_CAINFO 到给定文件。

CURLOPT_SSL_VERIFYPEER should not be set to false because the server should be validated
CURLOPT_SSLCERT should not be set since no authentication with a client certificate should be done
If both server and local CA store are setup properly it should work now. If not (i.e. missing sub-CA at the server) one might try to set CURLOPT_CAINFO to the given file.

这篇关于cURL 58错误无法加载客户端密钥-8178的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！

查看全文

cURL 58错误无法加载客户端密钥-8178 [英] cURL 58 error Unable to load client key -8178

问题描述

推荐答案

相关文章

PHP最新文章

热门教程

热门工具

登录关闭

cURL 58错误无法加载客户端密钥-8178 [英] cURL 58 error Unable to load client key -8178

问题描述

推荐答案

相关文章

PHP最新文章

热门教程

热门工具

登录 关闭

登录关闭