如何解决错误“无法加载 PEM 客户端证书，OpenSSL 错误:02001003:system library:fopen:No such process"? [英] How to solve the error "could not load PEM client certificate, OpenSSL error:02001003:system library:fopen:No such process"?

问题描述

如果这个问题很愚蠢，请原谅，但我是这方面的新手.我需要从 Drupal 7 站点通过 SSL 连接到服务.我有一个带有.p12"扩展名的文件和一个密码.另外，我使用 PHP 7.1 1 和 Windows 7 64x.我使用以下命令将 .p12 文件转换为 .pem 文件.

Excuse me if the question is silly, but I'm a novice in this area. I need to connect to a service via SSL from a Drupal 7 site. I have a file with a ".p12" extension and a password for it. Also, I use PHP 7.1 1 and Windows 7 64x. I converted .p12-file into .pem-file using the following command.

openssl pkcs12 -in myfile.p12 -out myfile.pem 

在我将 Openssl 安装到我的计算机中并将路径添加到 Windows 之前.之后，我尝试使用以下代码使用 CURL 函数连接到服务器.

Before I installed Openssl into my computer and added paths into Windows. After it I'm trying to use the following code for connecting to the server using CURL functions.

$ch = curl_init();

curl_setopt($ch, CURLOPT_URL, 'my_addr');
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, true);
curl_setopt($ch, CURLOPT_SSLCERT, 'myfile.pem');
curl_setopt($ch, CURLOPT_SSLCERTPASSWD, 'mypsw');
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);

$result = curl_exec($ch);

if ($result === FALSE){
  $curl_error = curl_error($ch);
}
curl_close($ch);

不幸的是，curl_exec 返回 FALSE，而 curl_error 返回以下内容:

Unfortunately, curl_exec returns FALSE and curl_error returns the following:

could not load PEM client certificate, OpenSSL error error:02001003:system library:fopen:No such process, (no key found, wrong pass phrase, or wrong file format?)

我决定在 Linux 共享主机上的客户端站点上执行此代码，而我的本地主机在 Windows 7 64x 上运行.代码执行没有任何错误，但 curl_exec 返回一个空字符串.

I decide to execute this code on the client's site which is on a Linux shared hosting, whereas my localhost works on Windows 7 64x. The code is executed without any errors, but curl_exec returns a void string.

我想澄清一下，我做错了什么以及为什么不想加载 PEM 客户端证书?我应该在本地主机上做什么来解决这个问题?我不能放弃使用 Windows 7 而开始使用 Linux.

I want to clarify, what am I doing wrong and why PEM client certificate doesn't want to load? What should I do on my localhost to solve this problem? I can't give up using Windows 7 and start using Linux instead it.

推荐答案

对于 SSL 验证，您需要 pem 格式的证书，它是关联的私钥(openssl 格式)和签署您的证书的认证机构的根证书pem 格式.

For a SSL verification you need a cert in pem format, it's associated private key (in openssl format) and the root certificate of the certification authoritity that signed your certificate in pem format.

检查此完整示例:

PHP:CURLOPT_SSLCERT的路径

如果你没有被告知，错误信息不是很清楚，但它说:

The error message is not really clear if your are not informed but it say it :

无法加载 PEM 客户端证书，OpenSSL 错误error:02001003:system library:fopen:No such process, (no key found,密码错误或文件格式错误?)

could not load PEM client certificate, OpenSSL error error:02001003:system library:fopen:No such process, (no key found, wrong pass phrase, or wrong file format?)

问候，

这篇关于如何解决错误“无法加载 PEM 客户端证书，OpenSSL 错误:02001003:system library:fopen:No such process"?的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！