Support » Fixing WordPress » Can't update WordPress – SSL certificate problem – error:14090086:S

  • Resolved webdevelopment

    (@webdevelopment)


    This also happens when I try to get a new plugin or theme.

    I can fix it by overwriting the default WordPress ca-bundle.crt with a different .crt file that my system admin supplied.

    This works to fix the problem, but I have a lot of new customers signing up to use WordPress and I can’t keep logging into copy over a file for each new customer.

    I also see this problem ALL OVER the support forums and no-one has yet suggested a fix. They just simply close the support ticket and move on like nothing happened.

    Why does copying a different crt file work to fix this problem??

    Can someone help me get to the bottom of this?

    Here’s the fix:

    first backup the default WordPress ca-bundle.crt file:

    cp /home/username/domains/domainname.org/public_html/wp-includes/certificates/ca-bundle.crt /home/username/domains/domainname.org/public_html/wp-includes/certificates/ca-bundle.crt.bak

    Then replace it with the crt file provided by my system admin.

    cp /root/cacert.pem /home/username/domains/domainname.org/public_html/wp-includes/certificates/ca-bundle.crt

    I haven’t installed SSL certificates in years so I don’t even remember what these crt files do, but it appears to be some kind of public/private key system.

    The biggest question is why the default WordPress ca-bundel.crt file is not working out of the box?

    Update WordPress

    Warning: An unexpected error occurred. Something may be wrong with WordPress.org or this server’s configuration. If you continue to have problems, please try the support forums. (WordPress could not establish a secure connection to WordPress.org. Please contact your server administrator.) in /usr/home/username/domains/domainname.com/public_html/wp-admin/includes/update.php on line 115

    Downloading update from http://downloads.wordpress.org/release/wordpress-4.3.1-no-content.zip…

    Download failed.: SSL certificate problem, verify that the CA cert is OK. Details: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed

    Installation Failed

Viewing 10 replies - 46 through 55 (of 55 total)
  • Moderator James Huff

    (@macmanx)

    Volunteer Moderator

    Any chance you could get OpenSSL updated there? The latest release is 1.0.2g, and using an up-to-date release of OpenSSL might have also fixed the problem.

    https://www.openssl.org/

    dd32

    (@dd32)

    Meta Developer

    Updating OpenSSL to something recent (and not OpenSSL 0.9.8e – from late 2007) will definitely fix these issues. I don’t understand why people run modern PHP with ancient OpenSSL..

    Using the latest ca-bundle.crt from WordPress should also resolve it (It’ll be in 4.4.3 / 4.5 upon their release) from here:
    https://core.trac.wordpress.org/export/36768/trunk/src/wp-includes/certificates/ca-bundle.crt

    Hey I have same problem. I did not have the ca-bundle.crt file in my wp-includes/certificates. Actually I did not even have the certificates folder. I create that folder and put the ca-bundle.crt file which I downloaded it from the https://core.trac.wordpress.org/export/36768/trunk/src/wp-includes/certificates/ca-bundle.crt link but still does not work. I am stuck can anyone help?

    When I click the update link it still gives “Download failed.: SSL certificate problem, verify that the CA cert is OK. Details: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed” error. I cant update the wordpress and without updating I cant use my new theme. This is really annoying..

    Waiting any idea.

    dd32

    (@dd32)

    Meta Developer

    @crescent72 if you don’t have that folder, you might have a really old version of WordPress which won’t use that file anyway. In that case your host needs to update their PHP configurations. You can also manually update to the latest version which should hopefully resolve it for you (If not, then copy the latest ca-bundle.crt in after that update)

    there’s instructions on how to perform a manual update here: https://codex.wordpress.org/Updating_WordPress#Manual_Update

    @dion Hulse Thanks for your answer. Actually I am a little worry about updating manually if I will do something wrong because I am not the owner of the website. So if I contact with the host what should I tell them exactly? Which files needs to be changed? If you may help me I will really appreciate it. Thanks in advance.

    dd32

    (@dd32)

    Meta Developer

    @crescent72 unfortunately it could be one of many things. It’s probably a system with an out of date SSL Certificate bundle, a conflicting OpenSSL version, it could be a bad PHP compile, it could be that the WordPress install is still running on PHP 5.2 while they have PHP 5.6 for other things, etc, there’s way too many different things that can cause this scenario.

    I’d probably start with the PHP version, if it’s not up to date, see if the site can be switched to a newer version of PHP.

    A manual update isn’t as hard as it seems, just copy the new files over the top of the existing ones.

    @dion Hulse so, if I update wordpress manually, is it still needed to contact with my host for php version or something else?

    dd32

    (@dd32)

    Meta Developer

    @crescent72 if Updating manually fixes it, you don’t need to contact the host. I’d still urge you to check with them that you’re running a recent version of PHP however.

    hey guys

    i’ve just update to 4.5.2 and the issue has re-appeared. I have replaced with the old ca-bundle cert and this has fixed half the issue but the remote get is still not functional

    Remote Post: ✔
    Remote Get: ✕ wp_remote_get() failed. The WooCommerce plugin updater won’t work with your server. Contact your hosting provider. Error: SSL certificate problem, verify that the CA cert is OK. Details: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed

    Hi plz help

    im using wordpress on my local mechine via wamp server
    when i install any new theme or any plugine then following error comes ————-

    Installation failed: Download failed. cURL error 60: SSL certificate problem: unable to get local issuer certificate

Viewing 10 replies - 46 through 55 (of 55 total)
  • The topic ‘Can't update WordPress – SSL certificate problem – error:14090086:S’ is closed to new replies.