We build. You grow.

Get best community software here

Start a social network, a fan-site, an education project with oxwall - free opensource community software

Facebook Connect Plugin Error | Forum

Sean
Sean Feb 17 '13

Recently installed the facebook connect plugin. First when I add the app ID and secret I get an application setup failed, but I am still able to configure the plugin further. Then when trying the FB connect button I get the following error:


Message:error setting certificate verify locations: CAfile: /etc/pki/tls/certs/ca-bundle.crt CApath: none

File:/home/streevpt/public_html/ow_libraries/facebook/base_facebook.php

Line:819

Trace:

#0 /home/streevpt/public_html/ow_libraries/facebook/base_facebook.php(770): BaseFacebook->makeRequest('https://api-rea...', Array)

#1 /home/streevpt/public_html/ow_libraries/facebook/base_facebook.php(704): BaseFacebook->_oauthRequest('https://api-rea...', Array)

#2 /home/streevpt/public_html/ow_libraries/facebook/base_facebook.php(550): BaseFacebook->_restserver(Array)

#3 /home/streevpt/public_html/ow_plugins/fbconnect/bol/service.php(162): BaseFacebook->api(Array)

#4 /home/streevpt/public_html/ow_plugins/fbconnect/bol/service.php(183): FBCONNECT_BOL_Service->fbGetFieldValueList('1500766885', Array)

#5 /home/streevpt/public_html/ow_plugins/fbconnect/controllers/connect.php(81): FBCONNECT_BOL_Service->requestQuestionValueList('1500766885')

#6 [internal function]: FBCONNECT_CTRL_Connect->login(Array)

#7 /home/streevpt/public_html/ow_core/request_handler.php(266): ReflectionMethod->invokeArgs(Object(FBCONNECT_CTRL_Connect), Array)

#8 /home/streevpt/public_html/ow_core/application.php(317): OW_RequestHandler->dispatch()

#9 /home/streevpt/public_html/index.php(65): OW_Application->handleRequest()

#10 {main}

Type:FacebookApiException

Bambie Murphy
Bambie Murphy Feb 17 '13
Sean bit of advice, remove your cPanel username. People use it to hack your cPanel account.


And it looks like a Curl error. Post the error to your host and ask them to


Execute this:

/bin/chmod 755 /etc/pki/tls/certs
The Forum post is edited by Bambie Murphy Feb 17 '13
Alia Team
Alia Feb 20 '13
Sean, this issue is related to cURLS. We are currently checking the issue.
Alia Team
Alia May 19 '13
Most likely the issue was caused by server settings, since Oxwall doesn't interact with those certificates- everything is done via Facebook SDK.


Arno
Arno Feb 8 '15
Dragging up an old topic. I am confronted with the same issue. Is there a fix or workaround ? See debug from e500.php


Error details:Type:ExceptionMessage:error setting certificate verify locations: CAfile: /etc/ssl/certs/ca-certificates.crt CApath: noneFile:/data/www/fiat/htdocs/wall/ow_libraries/facebook/base_facebook.phpLine:977

Line is longer and i left out the trace info. 


Already tried Bambi's suggestion, no fix...

ross Team
ross Feb 8 '15
What is your software and FB plugin versions?
When did you get this error?
Arno
Arno Feb 9 '15
Oxwall 1.7.2. (8520)

Plugin 8320


Servers setup is based on Eisfair with most recent Apache 2 and php versions

The Forum post is edited by Arno Feb 9 '15
Arno
Arno Feb 13 '15
ross, any ideas ?
ross Team
ross Feb 15 '15
Arno, what are the permissions of this folder: etc/ssl/certs/ ? make sure it is 755
Arno
Arno Feb 18 '15
Sorry for the slow reply,


For the regular ftp user, used to install the oxwall site, permissions are 755 and not changable

For the Root user permissions are 755 and changable


I tried 775, no luck so reverted back to 755


Viewed certs configuration, some there but service disabled... ? Enabled certs service, no luck...


Must be doing something terrably wrong...

When i check my certificates, location given is : /usr/local/ssl/certs so should not this be the directory pointed at...?


The Forum post is edited by Arno Feb 18 '15
ross Team
ross Feb 18 '15
Arno, we use facebook SDK which on its part uses CURL under SSL which tries to use the certificates, which are on your server and cannot find it. I mean this one: /etc/ssl/certs/ca-certificates.crt


Also the latest FB version is 8520, please update your plugin and try again. If the issue persists, you need to contact your hosting provider to resolve the issue with the certificates on your server. 

Arno
Arno Feb 19 '15
Thanks for the reply, i found one ca.cert in the other location and its container is in the disired location. I host my own so i'll have to fix it as well...


If i understand correct i need to have a trusted certificate for the communication in the desired location. It can't be self signed because that would not be trusted...right ?


I'll try to update first and then dive into this certificate jungle..


Thanks sofar, your answers are guiding me through google ;-)

ross Team
ross Feb 24 '15
Yes, you need a verified certificate. you can search in google. There are must be the website which sell them. 
Arno
Arno Feb 24 '15
Almost there, i found a CA that provides free and truted basic certificates, this should be enough because Facebook has hardly got a policy regardig certificate security level. 

The problem i ran into now is that my domain contains a car brand name. The CA won't give out a certificate because of that... looking for a workaround with an alternative domainname.


As long as the handshake is verified the connect plugin should work.

Arno
Arno Feb 24 '15
Yes, i'm going to get a certificate... the certmaster with the CA is going to make an exception because he remembers the specific type of car the site is about... more to follow. If i can spare the time i'll make a howto for the self hosters among us, of course after i get connect up and running...


Ross, thanks for the support, it's going to be ok now !