Uploaded image for project: 'FreePBX'
  1. FreePBX
  2. FREEPBX-22910

Changes needed to download from servers using LetsEncrypt certs

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: 15
    • Fix Version/s: None
    • Component/s: FreePBX Framework
    • Labels:
      None
    • Sprint:
      Sprint 62
    • ToDo:

      Description

      You have a dependency on this package to do file transfers, and it's locked at version 1.7.0, which was released 5 years ago.

      Since the recent expiration of the LetsEncrypt root CA, all file transfers to servers using LE certificates are failing. Why? Because in addition to being ancient, the author of this package thought it would be a good idea to use their own certificate bundle in the codebase. (Hint: it's a shitty idea.)

      How to fix quickly? Setting the `verify` option to true will let the package use the system CA bundle.
       

      
      --- /var/www/html/admin/libraries/modulefunctions.class.php
      +++ /var/www/html/admin/libraries/modulefunctions.class.php
      @@ -1711,6 +1711,7 @@
       			'hooks' => $hooks,
       			'timeout' => 1800, // Allow up to 1800 seconds (30 minutes) for the download to complete
       			'filename' => $filename, //avoid the requests object redundant decompress code
      +			'verify' => true,
       		);
       		$response = $requests->get('', array(), $options);
       
      

      The real fix is to use a modern library and not something from 2016.

        Gliffy Diagrams

          Attachments

            Activity

              People

              • Assignee:
                mbrooks Matt Brooks
                Reporter:
                miken32 miken32
              • Votes:
                0 Vote for this issue
                Watchers:
                5 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved:

                  NextupJiraPlusStatus

                  Error rendering 'slack.nextup.jira:nextup-jira-plus-status'. Please contact your Jira administrators.