Resolved Failed update for Plesk extensions: Error in cURL request: Peer certificate cannot be authenticated

[Jesse Fitzgerald]

Greetings,

I have a spontaneous failure when trying to update a few extensions:

• Skins and Color Schemes
• WordPress Toolkit
• Advisor

CentOS 6.10 (Final)‬
Product Plesk Onyx
Version 17.8.11 Update #27, last updated on Oct 28, 2018 10:30 AM

"Error in cURL request: Peer certificate cannot be authenticated with known CA certificates"

I also see the message, "Peer certificate cannot be authenticated with known CA certificates" in the panel Server Management > Extensions > Extensions catalogue.

Can y'all point me in the right direction? Thanks in advance.

--Jesse

Here's the complete log:

[2018-10-28 10:40:08.307085] Installation started in background
[2018-10-28 10:40:08.307237]
Getting bootstrapper packages to installation list:
[2018-10-28 10:40:08.307384] skip package 'pp17.8.11-bootstrapper-17.8.11-cos6.build1708180920.15.x86_64' from component panel - same or newer version of this package is already installed (in system pp17.8.11-bootstrapper-17.8.11-cos6.build1708180920.15.x86_64)
[2018-10-28 10:40:08.307510] skip package 'sw-engine-cli-2.24-2.24.9-0centos.6.180409.1642.x86_64' from component panel - same or newer version of this package is already installed (in system sw-engine-cli-2.24-2.24.9-0centos.6.180409.1642.x86_64)
[2018-10-28 10:40:08.307622] Following bootstrapper packages will be installed: (empty)
[2018-10-28 10:40:08.307673] ----------------
[2018-10-28 10:40:08.307715] Getting packages to installation list:
[2018-10-28 10:40:08.307805] skip package 'ext-heavy-metal-skin-3.7.2-80.noarch' from component heavy-metal-skin - same or newer version of this package is already installed (in system ext-heavy-metal-skin-3.7.2-80.noarch)
[2018-10-28 10:40:08.307960] skip package 'ext-wp-toolkit-3.4.1-1101.noarch' from component wp-toolkit - same or newer version of this package is already installed (in system ext-wp-toolkit-3.4.1-1101.noarch)
[2018-10-28 10:40:08.308107] skip package 'ext-advisor-1.3.2-178.noarch' from component advisor - same or newer version of this package is already installed (in system ext-advisor-1.3.2-178.noarch)
[2018-10-28 10:40:08.308275] Following packages will be installed: ext-heavy-metal-skin-3.7.4-83.noarch ext-wp-toolkit-3.4.2-1139.noarch ext-advisor-1.4.0-291.noarch
[2018-10-28 10:40:08.308347] ----------------
[2018-10-28 10:40:08.512165] Loaded plugins: fastestmirror


(regen obsoletes cache)
[2018-10-28 10:40:08.702712] Check package set before installation
[2018-10-28 10:40:08.703556] The following packages from not selected components will be installed because they are required by other components' packages you selected for installation:
[2018-10-28 10:40:08.703849] Installing packages
[2018-10-28 10:40:08.714560] Bootstrapper has finished action (exec time: 0 sec.): parent_name='PLESK_17_8_11', sequence='prep', stage='execute', sequence_order='-1', operation='install', exec_cmd='touch /tmp/pp-bootstrapper-mode.flag; touch /var/lock/parallels-panel-maintenance-mode.flag; rm -f /var/lock/parallels-panel-upgrade-failure.flag; :'', m_arch='', output: ~empty
[2018-10-28 10:40:08.729659] Bootstrapper has finished action (exec time: 0 sec.): parent_name='PLESK_17_8_11', sequence='post', stage='execute', sequence_order='9998', operation='install', exec_cmd='test ! -x /usr/local/psa/admin/sbin/packagemng || /usr/local/psa/admin/sbin/packagemng --set-dirty-flag'', m_arch='', output: ~empty
[2018-10-28 10:40:09.009957] Bootstrapper has finished action (exec time: 1 sec.): parent_name='PLESK_17_8_11', sequence='post', stage='execute', sequence_order='9999', operation='install', exec_cmd='/usr/local/psa/bootstrapper/pp17.8.11-bootstrapper/bootstrapper.sh perform-deferred-actions'', m_arch='', output: ~empty
[2018-10-28 10:40:09.019419] Bootstrapper has finished action (exec time: 0 sec.): parent_name='PLESK_17_8_11', sequence='post', stage='commit', sequence_order='1', operation='install', exec_cmd='rm -f /tmp/pp-bootstrapper-mode.flag; rm -f /var/lock/parallels-panel-maintenance-mode.flag; :'', m_arch='', output: ~empty
[2018-10-28 10:40:12.752933] Extension package ext-heavy-metal-skin 3.7.4-83 installation failed with code 1, stdout: ~empty
stderr: Error in cURL request: Peer certificate cannot be authenticated with known CA certificates


[2018-10-28 10:40:12.772147] Execute command /usr/local/psa/admin/bin/send-error-report install --version 17.8.11
[2018-10-28 10:40:12.795663] Error: Failed to install or upgrade the extension 'Skins and Color Schemes' (package: heavy-metal-skin):
Error in cURL request: Peer certificate cannot be authenticated with known CA certificates


Warning! Not all packages were installed.
Please check if your system services are operable.
Please resolve this issue and try to install the packages again.
If you cannot resolve the issue on your own, contact product technical support for assistance.

Jesse Fitzgerald, Today at 10:42 AM Edit Delete Report

 

[Jesse Fitzgerald]

Problem solved. I noticed that cURL failed from the command line, so I took a look at my firewall. I just upgraded from a SonicWall tz210 to a tz600. The culprit was DPI over SSL. The problem went away when I disabled it. Hope this helps someone.