Windows IIS with PHP: Curl (60) SSL Certificate Problem: Unable to get local issuer certificate

44 Comments

1. julius 23/06/2018 at 00:15

   A million thanks you’s ! You saved me a huge headache ^_^

   Reply ↓
   1. Martin (Post author)25/06/2018 at 08:16

      Glad to hear that, thanks 😉

      Reply ↓
   2. Adam 04/11/2022 at 20:42

      Danke danke und danke.Sei gesegnet.

      Reply ↓
2. Shahrokh Fallah 29/09/2018 at 19:27

   Thanks a lot for your Generosity!!!

   Reply ↓
   1. Martin (Post author)01/10/2018 at 20:39

      You’re welcome and thanks 🙂

      Reply ↓
3. binu 10/10/2018 at 12:52

   Thanks a million

   Reply ↓
   1. Martin (Post author)16/10/2018 at 16:56

      You’re welcome 😉

      Reply ↓
4. Steve 11/04/2019 at 16:33

   You saved a PHP noob from an extended migraine!!! This is short, sweet and worked like a charm. Thank you for taking the time to publish this!

   Reply ↓
   1. Martin (Post author)11/04/2019 at 18:31

      You’re welcome 😉 – I dealed with the same migraine 😀

      Reply ↓
5. Leandro Matilla 02/07/2019 at 14:46

   It works for me!! THANKS <3

   Reply ↓
   1. Martin (Post author)02/07/2019 at 19:45

      Thanks – good to hear 😉

      Reply ↓
6. William Oorschot 09/07/2019 at 09:41

   don’t forget the ” ” is some situations

   curl.cainfo=”C:\Program Files (x86)\PHP\v7.1\extras\ssl\cacert.pem”

   Reply ↓
7. Teson 20/08/2019 at 15:37

   Big thanks! Finally a working TYPO3-installation on IIS.

   Reply ↓
8. Paul Gilpatrick 11/10/2019 at 17:43

   This also worked for me, using the curl.cainfo=”C:\Program Files (x86)\PHP\v7.1\extras\ssl\cacert.pem”

   line (with the apostrophes)

   Reply ↓
9. Your Admirer 16/10/2019 at 02:02

   Thanks so much! It’s hard to find solutions for IIS since most of forums discuss linux-based webservers. This was very helpful!

   Reply ↓
   1. Martin (Post author)17/10/2019 at 10:47

      Thanks for your feedback 🙂

      Reply ↓
10. Edgardo Sanabria 26/11/2019 at 06:20

    Thanks a lot, you saved one life with this

    Reply ↓
    1. Martin (Post author)13/12/2019 at 10:20

       Glad to hear 🙂

       Reply ↓
11. Matias 16/12/2019 at 11:43

    This was a critical issue, and this post was an fresh oasis to me. Thousands thanks and bless you!

    Reply ↓
    1. Martin (Post author)06/02/2020 at 10:58

       Thanks 🙂

       Reply ↓
12. Cyrille 04/06/2020 at 11:13

    Hi
    First a Huge thanks it has saved me !

    But for a wierd reason it works on my computer but not on my production server. The issue remains : cURL error 60: SSL certificate problem: unable to get local issuer certificate (see https://curl.haxx.se/libcurl/c/libcurl-errors.html)

    Maybe another idea?

    Reply ↓
    1. Martin (Post author)10/06/2020 at 10:24

       Hmm…have you tried a reboot, have not seen this before, is the path correct? 😉

       Reply ↓
13. Mehran 04/07/2020 at 20:16

    Thank you!

    Reply ↓
14. Claudio Martt 05/10/2020 at 18:42

    ola pra mim nao funcionou

    GuzzleHttp\Exception\RequestException
    cURL error 60: SSL certificate problem:

    Reply ↓
    1. Martin (Post author)08/10/2020 at 19:28

       Have you followed the guide and placed the cert. in the right path?

       Reply ↓
15. Maximilian Gehring 21/12/2020 at 11:47

    Thanks for the solution!
    Remark: QUOTEMARKS in Windows path were required in php.ini

    Reply ↓
    1. Martin (Post author)22/12/2020 at 15:17

       Thanks – and thanks for the hints 🙂

       Reply ↓
16. Marcos 21/05/2021 at 12:19

    Hi Martin, I did exactly like you recommended expecting to solve another curl/ssl issue I had:

    “SSL peer certificate or SSH remote key was not OK”

    Any idea about how to solve it? Have you seen this one before? It’s an IIS 8 with a PHP installation.

    I downloaded the certificate you recommended and added it to that folder and specified that path. It is working because I added also a php file on my server to check my php environment and it states now that I have TLS 1.3 support which I did not have before adding this certificate.

    Thanks in advance.

    Reply ↓
    1. Martin (Post author)21/05/2021 at 12:21

       Hi,
       Hmmm..

       Can you try this:
       https://www.mediawiki.org/wiki/Topic:W2fgz5rywc86hciu

       Regards Martin

       Reply ↓
       1. Marcos 21/05/2021 at 12:34

          Hi Martin. Thanks for your prompt response. Let me try those. I will let you know. This issue has been persistent for several days for me without finding the solution.

          Reply ↓
          1. Martin (Post author)21/05/2021 at 12:36

             Keep my fingers crossed then 🙂

             Have a great weekend 🙂

             Reply ↓
       2. Marcos 21/05/2021 at 12:52

          Tried to export that certificate, added it to the path of the php.ini. Did not work.
          Checked the IIS Authentication and Anonymous Authentication is enabled. Did not work either.
          Not sure what else is missing on curl config or the certificate. the same code worked fine in another server with linux. So the code works, the issue is some config in the server environment.
          Have a good weekend too.
          Thanks Martin.

          Reply ↓
          1. Martin (Post author)21/05/2021 at 13:00

             Hmm… if you are not using a real certificate, try with the unsecure switch in curl:
             https://serverfault.com/questions/469824/curl-disable-certificate-verification

             https://curl.se/docs/sslcerts.html

             Tell libcurl to not verify the peer. With libcurl you disable this with curl_easy_setopt(curl, CURLOPT_SSL_VERIFYPEER, FALSE);

             With the curl command line tool, you disable this with -k/–insecure.

             Reply ↓
             1. Marcos 21/05/2021 at 13:07

                Will try that path. Thanks Martin.
                Regards,
                Marcos.
             2. Martin (Post author)21/05/2021 at 13:08

                Great 🙂
17. Mustafa 28/05/2021 at 23:44

    you saved my day! thanks

    Reply ↓
    1. Martin (Post author)04/06/2021 at 11:24

       Thanks 🙂

       Reply ↓
18. Rob 16/08/2021 at 21:40

    Thanks! This helped me to get the mailchimp – PHP api working.

    Reply ↓
    1. Martin (Post author)02/10/2021 at 09:07

       Thanks Rob – glad to hear 🙂

       Reply ↓
19. Abhishek 06/09/2021 at 07:14

    This needs to go Viral. The best solution to this problem for IIS (Windows) users. Saved me a TON of headache.. I was trying to figure this out for 2 days…

    Reply ↓
    1. Martin (Post author)02/10/2021 at 09:06

       ha ha thanks Abhishek:-)

       Reply ↓
20. M Vega 27/01/2022 at 18:26

    I have just tried this and still get a curlError 60. I have also tried exporting our Root CA as Base-64 encoded X.509 (.CER), copying it to the relevant folder, and pointed the php.ini to it with the same result.
    We do have an Intermediate CA.
    The only thing we haven’t tried is a server reboot.

    Reply ↓
    1. Martin (Post author)28/01/2022 at 13:13

       Confirm the folder i actually the correct PHP version, do you have multiply PHP versions installed?
       “If anything fails – reboot” 🙂

       Regards Martin

       Reply ↓
21. Leon 11/05/2022 at 18:23

    Bro, you are the best! thanks!!

    Reply ↓

This site uses Akismet to reduce spam. Learn how your comment data is processed.