Composer Require 'package' 抛出 OpenSSL 错误

Question

这个问题似乎很常见，我已经浏览了很多与之相关的 SO 帖子，但没有任何效果，我快疯了。奇怪的是几周前它运行良好，几个月以来我没有安装任何新东西...

设置：

PHP 7.1.9
WAMPSERVER 3.1.0
阿帕奇 2.4.27
Composer 1.6.5（最新）
我没有使用代理，也没有防火墙
Windows 10

什么有效：

作曲家自我更新

什么不起作用：

正在安装包
我无法使用 firefox 61.0.1（64 位）访问 https://packagist.org/（不安全连接：MOZILLA_PKIX_ERROR_SELF_SIGNED_CERT）

composer require 出现的错误：

[Composer\Downloader\TransportException]
The "https://packagist.org/packages.json" file could not be downloaded: SSL operation failed with code 1. OpenSSL Error messages:
error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed
Failed to enable crypto
failed to open stream: operation failed

php -r "var_dump(openssl_get_cert_locations());" Returns 这个：

array(8) {
  ["default_cert_file"]=>
  string(25) "c:/usr/local/ssl/cert.pem"
  ["default_cert_file_env"]=>
  string(13) "SSL_CERT_FILE"
  ["default_cert_dir"]=>
  string(22) "c:/usr/local/ssl/certs"
  ["default_cert_dir_env"]=>
  string(12) "SSL_CERT_DIR"
  ["default_private_dir"]=>
  string(24) "c:/usr/local/ssl/private"
  ["default_default_cert_area"]=>
  string(16) "c:/usr/local/ssl"
  ["ini_cafile"]=>
  string(51) "C:/wamp64/bin/php/php7.1.9/extras/ssl/ca-bundle.crt"
  ["ini_capath"]=>
  string(0) ""
}

我已经下载了 ca-bundle.crt 并将其添加到我的 php.ini 文件中：

curl.cainfo=C:/wamp64/bin/php/php7.1.9/extras/ssl/ca-bundle.crt    
openssl.cafile=C:/wamp64/bin/php/php7.1.9/extras/ssl/ca-bundle.crt

作曲家诊断 returns 这个：

Checking composer.json: OK
Checking platform settings: OK
Checking git settings: OK
Checking http connectivity to packagist: WARNING
[Composer\Downloader\TransportException] The "http://packagist.org/packages.json" file could not be downloaded (HTTP/1.1 404 Not Found)
Checking https connectivity to packagist: WARNING
[Composer\Downloader\TransportException] The "https://packagist.org/packages.json" file could not be downloaded: SSL operation failed with code 1. OpenSSL Error messages:
error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed
Failed to enable crypto
failed to open stream: operation failed
Checking github.com rate limit: OK
Checking disk free space: OK
Checking pubkeys: OK
Checking composer version: OK
Composer version: 1.6.5
PHP version: 7.1.9
PHP binary path: C:\wamp64\bin\php\php7.1.9\php.exe

作曲家秀 -p -vvv | grep ssl returns 这个：

Reading ./composer.json
Loading config file ./composer.json
Checked CA file C:\wamp64\bin\php\php7.1.9\extras\ssl\ca-bundle.crt: valid
Executing command (C:\wamp64\www\projectName): git branch --no-color --no-abbrev -v
Failed to initialize global composer: Composer could not find the config file: C:/Users/********/AppData/Roaming/Composer/composer.json
To initialize a project, please create a composer.json file as described in the https://getcomposer.org/ "Getting Started" section
Reading C:\wamp64\www\projectName/vendor/composer/installed.json
Loading plugin PackageVersions\Installer
Loading plugin Symfony\Flex\Flex
Composer >=1.7 not found, downloads will happen in sequence
Running 1.6.5 (2018-05-04 11:44:59) with PHP 7.1.9 on Windows NT / 10.0
ext-openssl         7.1.9    The openssl PHP extension
lib-openssl         1.0.2.11 OpenSSL 1.0.2k  26 Jan 2017

php --ini :

Configuration File (php.ini) Path: C:\WINDOWS
Loaded Configuration File:         C:\wamp64\bin\php\php7.1.9\php.ini
Scan for additional .ini files in: (none)
Additional .ini files parsed:      (none)

编辑 1
- 尝试清空缓存
- 其他网络浏览器（chrome、edge）但它没有工作
- 同一网络上的另一台计算机 --> 它有效

编辑 2
- 创建了一个新的 windows 用户，没用

编辑 3
- 我可以按照 @kallosz
的建议达到 https://repo.packagist.org/ - Curl 给我这个：

curl -vvv https://packagist.org/
*   Trying 144.217.203.53...
* TCP_NODELAY set
* Connected to packagist.org (144.217.203.53) port 443 (#0)
* schannel: SSL/TLS connection with packagist.org port 443 (step 1/3)
* schannel: checking server certificate revocation
* schannel: sending initial handshake data: sending 178 bytes...
* schannel: sent initial handshake data: sent 178 bytes
* schannel: SSL/TLS connection with packagist.org port 443 (step 2/3)
* schannel: failed to receive handshake, need more data
* schannel: SSL/TLS connection with packagist.org port 443 (step 2/3)
* schannel: encrypted data got 1462
* schannel: encrypted data buffer: offset 1462 length 4096
* schannel: next InitializeSecurityContext failed: SEC_E_UNTRUSTED_ROOT (0x80090325) - La chaîne de certificats a été fournie par une autorité qui n'est pas approuvée.
* Closing connection 0
* schannel: shutting down SSL/TLS connection with packagist.org port 443
* schannel: clear security context handle
curl: (77) schannel: next InitializeSecurityContext failed: SEC_E_UNTRUSTED_ROOT (0x80090325)

Answer 1

尝试

composer config disable-tls true
composer config secure-http false

您还可以将作曲家配置 repositories.packagist.org.url 更改为 https?://repo.packagist.org。

Answer 2

我不得不在 Ubuntu 上重新安装 CURL 开发库，即将 NSS 风格替换为 OpenSSL 之一：

sudo apt install -y libcurl4-openssl-dev

使用 phpbrew 重建 PHP 导致通过适当的库调用启用了 libcurl；反过来，正确识别 CA 证书捆绑，将其指向 正确位置。

Answer 3

我必须更改全局配置文件

C:\Users\USERNAME\AppData\Roaming\Composer\config.json

对此：

{
    "config": {
        "disable-tls": true,
        "secure-http": false
    },
    "repositories": [
        {
            "type": "composer",
            "url": "http://repo.packagist.org"
        }
    ]
}

Composer Require 'package' 抛出 OpenSSL 错误

Composer Require 'package' throws OpenSSL error

php

ssl-certificate

composer-php

packagist