PHP 5.6: Can't connect to the server that uses self-signed certificate.

[youmad]

In connect() method of Fabiang\Xmpp\Stream\SocketClient class it is necessary to use stream_socket_client() with the sixth attribute: stream_context_create($options)
where $options contains settings of SSL, for example:

// call stream_socket_client with custom error handler enabled
$handler = new ErrorHandler(
    function ($address, $timeout, $flags) {
        $options = [
            'ssl' => [
                'allow_self_signed' => true,
                'verify_peer_name' => false,
            ],
        ];
        $context = stream_context_create($options);
        return stream_socket_client($address, $errno, $errstr, $timeout, $flags, $context);
    },
    $this->address,
    $timeout,
    $flags
);

This is required so as to have possibility to use self signed SSL certificates.

[resourcemode]

Any update on this issue?

@youmad i encounter the same issue. Using your code above fixed it.
Please create a PR.

[bgaillard]

Hi, I can also confirm @youmad code fixes the errors with self-signed certificate, perhaps this additional configuration could be passed as an option of the XMPP client ?

$client = new \Client($address);
$client->setSslOptions(
    [
        'allow_self_signed' => true,
        'verify_peer_name' => false
    ]
);

[jpaechnatz]

I used above patch to get rid of the message, BTW it's a letsencrypt cert:
PHP Warning: stream_socket_enable_crypto(): SSL operation failed with code 1. OpenSSL Error messages:
error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed in /var/www/virtual/obbala/html/kanboard/plugins/Jabber/vendor/fabiang/xmpp/src/Stream/SocketClient.php on line 192

Now getting:
PHP Warning: stream_socket_enable_crypto(): SSL operation failed with code 1. OpenSSL Error messages:
error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed in /var/www/virtual/obbala/html/kanboard/plugins/Jabber/vendor/fabiang/xmpp/src/Stream/SocketClient.php on line 200

Any idea how to fix stream_socket_enable_crypto?

Thanks.

[youmad]

@jpaechnatz You may try with option 'verify_peer' = false:

        $options = [
            'ssl' => [
                'allow_self_signed' => true,
                'verify_peer' => false, // THIS
                'verify_peer_name' => false,
            ],
        ];

[jpaechnatz]

Works! Thanks! Could someone provide a patch or config Option for it?

[youmad]

@jpaechnatz It's already here #31