Facebook
Twitter
websavers
Regular Pleskian
TITLE:
PHP libcurl fails to populate certinfo array
PRODUCT, VERSION, OPERATING SYSTEM, ARCHITECTURE:Plesk Onyx 17.8.11 Update #41 OS: CentOS Linux 7.6.1810 (Core). PHP: 7.2.15. curl curl 7.29.0 (x86_64-redhat-linux-gnu) libcurl/7.29.0
PROBLEM DESCRIPTION:Use $certinfo = curl_getinfo($ch, CURLINFO_CERTINFO); to get SSL certificate info and the certinfo variable is not populated -- it remains empty. If you also grab the basic info, it shows the array as being empty:
$info = curl_getinfo($ch);
print_r($info);
STEPS TO REPRODUCE:$info = curl_getinfo($ch);
print_r($info);
Set up a vhost on CentOS 7.5 running nginx direct to php-fpm with PHP v7.2.15 or 7.3.2. Add this to a PHP file in the web root, then visit the URL path:
ACTUAL RESULT:
PHP:
<?php
$domain = 'plesk.com';
$ch = curl_init();
curl_setopt($ch, CURLOPT_URL, 'https://' . $domain);
curl_setopt($ch, CURLOPT_VERBOSE, 1);
#curl_setopt($ch, CURLINFO_HEADER_OUT, true);
curl_setopt($ch, CURLOPT_STDERR, 'php://stdout');
curl_setopt($ch, CURLOPT_CERTINFO, 1);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
curl_setopt($ch, CURLOPT_NOBODY, 1);
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 1);
curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 2);
curl_setopt($ch, CURLOPT_TIMEOUT, 10);
if(curl_exec($ch) === false){
echo '<p>Curl error: ' . curl_error($ch) . "</p>";
}
$info = curl_getinfo($ch);
print_r($info);
$certInfo = curl_getinfo($ch, CURLINFO_CERTINFO);
echo "<p>Certificate info for $domain: ";
print_r($certInfo[0]);
echo "</p><p>Test is done</p>";
?>You'll notice that $certInfo prints as empty.
You can see it in action here: https://clients.websavers.ca/ssl_monitoring_test.php
EXPECTED RESULT:You can see it in action here: https://clients.websavers.ca/ssl_monitoring_test.php
The $certInfo var should be printing out an array of information about the SSL certificate like this (run on another domain on a non-Plesk server):
ANY ADDITIONAL INFORMATION:Certificate info for mydomain.com: Array ( [Subject] => CN = mydomain.com [Issuer] => C = US, O = Let's Encrypt, CN = Let's Encrypt Authority X3 [Version] => 2 [Serial Number] => 03c8d112700641145608b3daa7e29fb00f0a [Signature Algorithm] => sha256WithRSAEncryption [Public Key Algorithm] => rsaEncryption [X509v3 Key Usage] => DigitalSignature,KeyEncipherment [X509v3 Extended Key Usage] => TLSWebServerAuthentication,TLSWebClientAuthentication [X509v3 Basic Constraints] => CA:FALSE [X509v3 Subject Key Identifier] => 15:22:31:4AD:0F:EB:8F:63:3C:61:42:9E:CC:CE:E1:28:55:C1:F1 [X509v3 Authority Key Identifier] => keyid:A8:4A:6A:63:04:7D
This issue came about while using WHMCS -- the latest release of the software attempts to get SSL certificate info from domains and indicate if there's any problems and that they should set up an SSL cert.
The WHMCS techs said this about this issue: 'this is a bug with the PHP build or "curl" extension itself'
Note that certinfo *is* shown if you run curl via command line.
YOUR EXPECTATIONS FROM PLESK SERVICE TEAM:The WHMCS techs said this about this issue: 'this is a bug with the PHP build or "curl" extension itself'
Note that certinfo *is* shown if you run curl via command line.
Help with sorting out
