Knowledge Base

Website on Plesk shows: cURL error (77): Problem with the SSL CA cert

A website or PHP scripts show the following error:

cURL error (77): Problem with the SSL CA cert (path? access rights?)cURL error (77): Problem with the SSL CA cert (path? access rights?)

Error : "error setting certificate verify locations: CAfile: C:ParallelsPleskAdditionalPHPSettingscacert.pem CApath: none"

cURL error 77: error setting certificate verify locations: CAfile: /etc/ssl/certs/cacert.pem CApath: /etc/ssl/certs

On Plesk for Windows the Extensions menu may show the following error when trying to open it:

PLESK_ERROR: error setting certificate verify locations: CAfile: C:Program Files (x86)Pleskadminconfcacert.pem CApath: none

PHP cURL uses an outdated set of root certificates to verify server certificates.

Log in to Plesk.
Install Panel.ini Editor extension: Extensions > Server Tools section > Panel.ini Editor.
Go to Extensions > My Extensions > Panel.ini Editor (Go To Extension) > Editor.

Add records below to the editor and Save changes:

[php]
curlCertificatesUrl="http://curl.haxx.se/ca/cacert.pem"

Wait until Daily task is executed (It is executed once a day).
Go to Domains > example.com > PHP Settings and add the line below into Additional configuration directives. Replace path to cacert.pem with your own path.
```
curl.cainfo="C:Program Files (x86)PleskAdditionalPHPSettingscacert.pem"
```
If it is required to apply the changes for all the domains using a particular PHP version go to Tools & Settings > PHP Settings> %php_version%, click on php.ini tab and add the aforementioned line:

Log in to the server via RDP.
Download the cacert.pem file from the main curl website http://curl.haxx.se/ca/cacert.pem.
Open [%plesk_dir%](https://support.plesk.com/hc/en-us/articles/213903325))adminconfpanel.ini file (create it if does not exist)

Note: %plesk_dir% by default is C:Program Files (x86)Plesk

Add below directive to panel.ini.

[php]
curlCertificatesUrl="http://curl.haxx.se/ca/cacert.pem

Place downloaded cacert.pem to [%plesk_dir%](https://support.plesk.com/hc/en-us/articles/213903325)AdditionalPHPSettings directory.
Wait until Daily task is executed (It is executed once a day).

Connect to the server using SSH.
Download the CA certificate store from the official cURL website and move it to the directory /etc/ssl/certs/:

# wget https://curl.haxx.se/ca/cacert.pem && mv cacert.pem /etc/ssl/certs/
Log into Plesk.
Go to Tools & Settings > PHP Settings > select the required PHP version > php.ini.
Add the following line into the end of the file:
```
curl.cainfo="/etc/ssl/certs/cacert.pem"
```
Click OK to save the file