Your cURL PHP extension is using an outdated OpenSSL version

    • Carla Espindola
      Participant
      # 12 months ago

      Hello!

      I’m getting this error trying to activate my licenses. Unfortunately, the hosting provider tells me the version they run is OpenSSL 1.0.1 , and it won’t be changed. Am I doomed to switch providers?

      Also, which is the minimum version of OpenSSL I need for the licenses to work? The best I got so far from other providers is versio 1.0.2k-fips . Will that one work?

      Best regards,

      Carla

    • Thomas
      Keymaster
      # 12 months ago

      Hello there.

      I’m getting this error trying to activate my licenses.

      Years ago (in 2020…), some let’s encrypt root certificates used by openSSL version 1.0.1 and older expired. That day, it prevented curl to successfully access any server using let’s encrypt (like ours) through SSL.

      This issue doesn’t come from us, but from this outdated verson of curl not being able to securely connect to let’sencrypt servers. This is actually a global issue from your hosting provider. You won’t only get issues with our plugin and the licenses management, but with any plugin using curl to connect to a let’sencrypt SSL server (which is commonly used).

      the hosting provider tells me the version they run is OpenSSL 1.0.1 , and it won’t be changed.

      Honestly, that answer from an hosting provider is quite unsual, especially since that issue is now really old.

      Also, which is the minimum version of OpenSSL I need for the licenses to work?

      Since that issue came up, the minimum recommended version of cURL is 1.1.0, which should bundle openSSL 1.0.2+. Please check your PHPinfo settings, and do not hesitate to post both the actual version you’re using from cURL and openSSL.

      Old Let’s Encrypt Root Certificate Expiration and OpenSSL 1.0.2 – OpenSSL Blog

      Regards.

       

      Want to help WP Customer Area? It only takes few seconds!
      Rate & review the plugin on WordPress.org 🙂

Viewing 1 reply thread

The topic ‘Your cURL PHP extension is using an outdated OpenSSL version’ is closed to new replies.