ssl3_get_server_certificate:certificate verify failed

  • Resolved sander2343

    (@sander2343)


    2 years, 10 months ago

    Good day,

    I’m having problems sending mail with WP Mail SMTP. Have been trying to fix this in several ways by downloading new CA certficates, upgrading openssl and other stuff I cant remember. I checked ssllabs and everything should be good. Could you please advise?

    Im getting the following error (full log):
Versions:
WordPress: 6.2.2
WordPress MS: No
PHP: 7.4.16
WP Mail SMTP: 3.8.0

Params:
Mailer: smtp
Constants: No
ErrorInfo: SMTP Error: Could not connect to SMTP host. Connection failed. stream_socket_enable_crypto(): SSL operation failed with code 1. OpenSSL Error messages:
error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failedSMTP server error: QUIT command failed Detail: MIAŻ ||} B +C P B Ū2 \ \ \ :ZC l 5jl' 4 Yʻ '6nR D+ 9 % S Ԟ e v6&] mMȩl-  t+2 a1 T _ oˣ O * 9c*[ s (c:uzU0 n yd ]6#~.BK # g U ).E1~ + .^4V Ww V -79 w b4-{ hZ ){ ̲ $v SߐA9L ֥ODzC S b j e X!a l Gq U
Host: smtp.tipszorg.nl
Port: 587
SMTPSecure: tls
SMTPAutoTLS: bool(true)
SMTPAuth: bool(true)

Server:
OpenSSL: OpenSSL 1.0.2g 1 Mar 2016

Debug:
E-mail Bron: WP Mail SMTP
Mailer: Andere SMTP-service
SMTP Error: Could not connect to SMTP host.SMTP server error: QUIT command failed

SMTP Debug:
2023-06-15 07:46:03 Connection: opening to smtp.tipszorg.nl:587, timeout=300, options=array()

2023-06-15 07:46:03 Connection: opened

2023-06-15 07:46:03 SERVER -> CLIENT: 220 h2049814.stratoserver.net ESMTP Postfix (Ubuntu)

2023-06-15 07:46:03 CLIENT -> SERVER: EHLO tipszorg.nl

2023-06-15 07:46:03 SERVER -> CLIENT: 250-h2049814.stratoserver.net250-PIPELINING250-SIZE 102400000250-ETRN250-STARTTLS250-ENHANCEDSTATUSCODES250-8BITMIME250-DSN250-SMTPUTF8250 CHUNKING

2023-06-15 07:46:03 CLIENT -> SERVER: STARTTLS

2023-06-15 07:46:03 SERVER -> CLIENT: 220 2.0.0 Ready to start TLS

2023-06-15 07:46:03 Connection failed. Error #2: stream_socket_enable_crypto(): SSL operation failed with code 1. OpenSSL Error messages:error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed [/path/to/root/wp/wp-includes/PHPMailer/SMTP.php line 468]

SMTP Error: Could not connect to SMTP host. Connection failed. stream_socket_enable_crypto(): SSL operation failed with code 1. OpenSSL Error messages:error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed

2023-06-15 07:46:03 CLIENT -> SERVER: QUIT

2023-06-15 07:46:03

2023-06-15 07:46:03

2023-06-15 07:46:03 Connection: closed

SMTP Error: Could not connect to SMTP host. Connection failed. stream_socket_enable_crypto(): SSL operation failed with code 1. OpenSSL Error messages:error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed

Kind regards,

Sander
    • This topic was modified 2 years, 10 months ago by sander2343.
    • This topic was modified 2 years, 10 months ago by sander2343.

    The page I need help with: [log in to see the link]

Viewing 7 replies - 1 through 7 (of 7 total)
  • Plugin Support Dake

    (@dakeg)

    2 years, 10 months ago

    Hi @sander2343

    Thanks for reaching out and we’re sorry to hear that you are experiencing issues with connecting to your SMTP host due to SSL issues.

    The issue you ran into with the SMTP connection was a serverside issue. Essentially, PHP was unable to make an SMTP connection to your SMTP server due to an error with the SSL certificate. This is not something we would be able to address, as it’s more in your hosting company’s field.

    We would recommend reaching out to your website host’s support team. If they are unable to resolve, then as a test we would recommend trying to set up a different mailer.

    We say this because SMTP connections can run into issues like the one you saw, as they are more susceptible to server configuration issues. The Gmail mailer (and the other mailers like SendLayer, Sendinblue, etc) use an API connection to reach the server, thus may potentially get around the kind of issue you are experiencing.

    I hope this helps! If you have any questions, could you please let me know?

    Thanks! 🙂

    Thread Starter sander2343

    (@sander2343)

    2 years, 10 months ago

    It seems like your plugin is looking for certificates it probably cant find.

    Where does your plugin expect the certificates to reside on the server?

    My hosting company is pointing at the plugin’s code btw.

    kind regards,

    Sander

    Plugin Support Dake

    (@dakeg)

    2 years, 10 months ago

    Hi @sander2343

    Our developers confirmed that this is a server-related issue.

    The “Other SMTP” mailer uses the PHPMailer class, which is bundled in the WordPress core, so the issue can’t be in our plugin codebase.

    Here is the troubleshooting guide for this specific issue: 

    https://github.com/PHPMailer/PHPMailer/wiki/Troubleshooting#certificate-verification-failure

    We would also suggest updating your OpenSSL, since it’s outdated:

    OpenSSL: OpenSSL 1.0.2g 1 Mar 2016

    Also, in case it helps, certificate verification can be disabled via a code snippet. However, this is not recommended since communication with the SMTP server will be insecure (not encrypted) if there is an issue with your certificate:
    https://gist.github.com/slaFFik/c1d7d4249f47da7195fb973109952090

    In case it helps, here’s a tutorial with the most common ways to add custom code like this: 

    https://www.wpbeginner.com/beginners-guide/beginners-guide-to-pasting-snippets-from-the-web-into-wordpress/.

    For the most beginner-friendly option in the guide above, I’d recommend using the WPCode plugin: http://www.wpbeginner.com/plugins/how-to-easily-add-custom-code-in-wordpress-without-breaking-your-site/. This will protect your code from updates and keep it easy to manage right within your WordPress admin area.

    • This reply was modified 2 years, 10 months ago by Dake.
    Thread Starter sander2343

    (@sander2343)

    2 years, 10 months ago

    Thank you for your reply. I’ll dive into it and update this topic if I have a sollution.

    Thread Starter sander2343

    (@sander2343)

    2 years, 10 months ago

    I’ve found the problem. I’m using a server managed by plesk and plesk uses a different php.ini. I had changed the php.ini files in /etc/php but I needed to change the php.ini in plesk, which is located in /opt/plesk/php/7.4/etc/php.ini

    Thread Starter sander2343

    (@sander2343)

    2 years, 10 months ago

    curl.cainfo =”/path/to/cacert.pem”
    openssl.cafile=”/path/to/cacert.pem”

    These changes in the correct php.ini fixed it.

    Plugin Support Dake

    (@dakeg)

    2 years, 10 months ago

    Hi @sander2343

    We’re happy to hear that the issue was resolved. Also, thank you for sharing the solution for future reference.

Viewing 7 replies - 1 through 7 (of 7 total)

The topic ‘ssl3_get_server_certificate:certificate verify failed’ is closed to new replies.