Automatic Upgrade from 7.3.0 to 7.4.1 not working

[aquiss]

Never had issues previously with automatic upgrades, always been spot on, however, this morning we have gone to upgrade and get the following errors

 

Error (Help Documentation)
Error: failed to open stream: operation failed
Failed to enable crypto
error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed
The "https://releases.whmcs.com/pkgs/whmcs-7.4.1-release.1.zip" file could not be downloaded: SSL operation failed with code 1. OpenSSL Error messages:
[Composer\Downloader\TransportException]
Downloading
- Installing whmcs/whmcs (7.4.1)
Updating dependencies
https://releases.whmcs.com could not be fully loaded, package information was loaded from the local cache and may be out of date
failed to open stream: operation failed
Failed to enable crypto
error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed
The "https://releases.whmcs.com/packages.json" file could not be downloaded: SSL operation failed with code 1. OpenSSL Error messages:
Loading composer repositories with package information

[WHMCS Nate]

So we know of three situations that can cause this:

1) You have out of date root certificates. These are normally provided by your OS and updating them can be as simple as getting the latest packages. Alternatively you can download fresh ones here:

https://curl.haxx.se/ca/cacert.pem

2) Some users have reported that the setting they have for php's openbasedir setting blocked the php program from opening that cacert bundle. In this case modifying or disabling that restriction allowed them to upgrade without issue. 

3) Something is causing your application not to connect to the real update server, this is what SSL certificate validation is designed to prevent. Most likely this is not the case, but if it was happening it may be a hacker attempting to get you to download and install different files so they can compromise your installation. We use multiple certificate and signature validation stages to ensure you get the files we intended. If you've addressed the first two possibilities the last option is something our support team can help you investigate further. 

Have a great day.

Nate C

[aquiss]

Cheers Nate,

I know we have raised a ticket with your support desk and they have highlighted points 1 and 2 already. We are just double checking everything our end before looking at point 3.

 

[aquiss]

Just and update, this was our end, but has taken some real debugging to get things sorted.

Thanks Nate and other whmcs staff today for highlighting an issue area. Ticket replies were very fast, detailed and exactly the professionalism that we needed. Top notch guys!

WHMCS Staff, this is linked to your ticket #BPI-325537

[WHMCS Nate]

Glad to hear it got resolved, was it 1, 2 or something else?

[aquiss]

8 minutes ago, WHMCS Nate said:

Glad to hear it got resolved, was it 1, 2 or something else?

I've put full details in ticket (id given above), however, it appears to be linked to a weird problem with our SSL (we moved to a multi domain SSL 2 months ago), so linked to point 1. 

[Edi]

I still have this error, I have no idea about this issue.

 

total 1924
-rw-r--r--  1 root root  884985 May  9  2017 ca-bundle.crt
-rw-r--r--  1 root root 1058960 May  9  2017 ca-bundle.trust.crt
-rw-------. 1 exim exim    1497 Oct 26  2016 exim.pem
-rw-------. 1 root root    1180 Oct 26  2016 localhost.crt
-rwxr-xr-x. 1 root root     610 Sep 27  2016 make-dummy-cert
-rw-r--r--. 1 root root    2242 Sep 27  2016 Makefile
-rwxr-xr-x. 1 root root     829 Sep 27  2016 renew-dummy-cert

[WHMCS Nate]

Hi Kudouyuzi,

You're showing some files / contents but not their location. The right location for these files depends on exactly how php and libcurl have been compiled and the operating system they are running on. These details can be examined but doing so works best if you can give our techs access via a support ticket.

Have you confirmed that your certs are part of any open_basedir settings you have set?

Nate

[Edi]

2 minutes ago, WHMCS Nate said:

Hi Kudouyuzi,

You're showing some files / contents but not their location. The right location for these files depends on exactly how php and libcurl have been compiled and the operating system they are running on. These details can be examined but doing so works best if you can give our techs access via a support ticket.

Have you confirmed that your certs are part of any open_basedir settings you have set?

Nate

open_basedir is disabled. I have a ticket but no answer now. But 7.2.3 to 7.3.0 no any errors.