Composer Require 'package' 引发 OpenSSL 错误

2022-01-21 00:00:00 ssl-certificate php composer-php packagist

这个问题似乎很常见，我已经浏览了很多与之相关的 SO 帖子，但没有任何效果，我快疯了.奇怪的是几周前它工作得很好，几个月以来我没有安装任何新东西......

This problem seems to be common, and i've been through a lot of SO posts related to it and nothing works, and i'm going crazy. Whats weird is that it was working perfectly few weeks ago, and i didnt install anything new since months...

设置:

  • PHP 7.1.9
  • WAMPSERVER 3.1.0
  • APACHE 2.4.27
  • Composer 1.6.5(最新)
  • 我没有使用代理 &没有防火墙
  • Windows 10

什么有效:

  • 作曲家自我更新

什么不起作用:

  • 安装包

我无法使用 firefox 61.0.1(64 位)访问 https://packagist.org/(不安全的连接:MOZILLA_PKIX_ERROR_SELF_SIGNED_CERT)

I cannot reach https://packagist.org/ with firefox 61.0.1 (64bits) (unsecure connection : MOZILLA_PKIX_ERROR_SELF_SIGNED_CERT)

我在 composer require 中遇到的错误:

The error i get with composer require :

[ComposerDownloaderTransportException]
The "https://packagist.org/packages.json" file could not be downloaded: SSL operation failed with code 1. OpenSSL Error messages:
error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed
Failed to enable crypto
failed to open stream: operation failed

php -r "var_dump(openssl_get_cert_locations());"返回:

array(8) {
  ["default_cert_file"]=>
  string(25) "c:/usr/local/ssl/cert.pem"
  ["default_cert_file_env"]=>
  string(13) "SSL_CERT_FILE"
  ["default_cert_dir"]=>
  string(22) "c:/usr/local/ssl/certs"
  ["default_cert_dir_env"]=>
  string(12) "SSL_CERT_DIR"
  ["default_private_dir"]=>
  string(24) "c:/usr/local/ssl/private"
  ["default_default_cert_area"]=>
  string(16) "c:/usr/local/ssl"
  ["ini_cafile"]=>
  string(51) "C:/wamp64/bin/php/php7.1.9/extras/ssl/ca-bundle.crt"
  ["ini_capath"]=>
  string(0) ""
}

我已经下载了 ca-bundle.crt 并将其添加到我的 php.ini 文件中: 

curl.cainfo=C:/wamp64/bin/php/php7.1.9/extras/ssl/ca-bundle.crt    
openssl.cafile=C:/wamp64/bin/php/php7.1.9/extras/ssl/ca-bundle.crt

作曲家诊断返回: 

Checking composer.json: OK
Checking platform settings: OK
Checking git settings: OK
Checking http connectivity to packagist: WARNING
[ComposerDownloaderTransportException] The "http://packagist.org/packages.json" file could not be downloaded (HTTP/1.1 404 Not Found)
Checking https connectivity to packagist: WARNING
[ComposerDownloaderTransportException] The "https://packagist.org/packages.json" file could not be downloaded: SSL operation failed with code 1. OpenSSL Error messages:
error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed
Failed to enable crypto
failed to open stream: operation failed
Checking github.com rate limit: OK
Checking disk free space: OK
Checking pubkeys: OK
Checking composer version: OK
Composer version: 1.6.5
PHP version: 7.1.9
PHP binary path: C:wamp64inphpphp7.1.9php.exe

作曲家表演 -p -vvv |grep ssl 返回:

Reading ./composer.json
Loading config file ./composer.json
Checked CA file C:wamp64inphpphp7.1.9extrassslca-bundle.crt: valid
Executing command (C:wamp64wwwprojectName): git branch --no-color --no-abbrev -v
Failed to initialize global composer: Composer could not find the config file: C:/Users/********/AppData/Roaming/Composer/composer.json
To initialize a project, please create a composer.json file as described in the https://getcomposer.org/ "Getting Started" section
Reading C:wamp64wwwprojectName/vendor/composer/installed.json
Loading plugin PackageVersionsInstaller
Loading plugin SymfonyFlexFlex
Composer >=1.7 not found, downloads will happen in sequence
Running 1.6.5 (2018-05-04 11:44:59) with PHP 7.1.9 on Windows NT / 10.0
ext-openssl         7.1.9    The openssl PHP extension
lib-openssl         1.0.2.11 OpenSSL 1.0.2k  26 Jan 2017

php --ini :

Configuration File (php.ini) Path: C:WINDOWS
Loaded Configuration File:         C:wamp64inphpphp7.1.9php.ini
Scan for additional .ini files in: (none)
Additional .ini files parsed:      (none)

编辑 1
- 尝试清空缓存
- 其他网络浏览器(chrome、edge)并没有工作
- 同一网络上的另一台计算机 --> 可以工作

EDIT 1
- Tried emptying cache
- Other web browser (chrome, edge) and it didnt work
- Another computer on same network --> it works

编辑 2
- 创建了一个新的windows用户，没有用

EDIT 2
- Created a new windows user, didnt work

编辑 3
- 我可以按照建议访问 https://repo.packagist.org/作者 @kallosz
- Curl 给了我这个:

EDIT 3
- I can reach https://repo.packagist.org/ as suggested by @kallosz
- Curl gives me this : 

curl -vvv https://packagist.org/
*   Trying 144.217.203.53...
* TCP_NODELAY set
* Connected to packagist.org (144.217.203.53) port 443 (#0)
* schannel: SSL/TLS connection with packagist.org port 443 (step 1/3)
* schannel: checking server certificate revocation
* schannel: sending initial handshake data: sending 178 bytes...
* schannel: sent initial handshake data: sent 178 bytes
* schannel: SSL/TLS connection with packagist.org port 443 (step 2/3)
* schannel: failed to receive handshake, need more data
* schannel: SSL/TLS connection with packagist.org port 443 (step 2/3)
* schannel: encrypted data got 1462
* schannel: encrypted data buffer: offset 1462 length 4096
* schannel: next InitializeSecurityContext failed: SEC_E_UNTRUSTED_ROOT (0x80090325) - La chaîne de certificats a été fournie par une autorité qui n'est pas approuvée.
* Closing connection 0
* schannel: shutting down SSL/TLS connection with packagist.org port 443
* schannel: clear security context handle
curl: (77) schannel: next InitializeSecurityContext failed: SEC_E_UNTRUSTED_ROOT (0x80090325)

推荐答案

试试

composer config disable-tls true
composer config secure-http false

您还可以将 composer config repositories.packagist.org.url 更改为 https?://repo.packagist.org.

you can also change composer config repositories.packagist.org.url to https?://repo.packagist.org.

相关文章