Change Details

Hi everyone, I just started to use arcanist on a linux system in combination with an instance of Phabricator, which uses a self-signed SSL cert. All the hints `arc` printed were just great (even told which php-modules are missing - WOW)! When all requirements were met, I got this: ``` mr@judge:~$ arc install-certificate Trying to connect to server... Usage Exception: Failed to connect to server (https://phabricator.marc-richter.info/api/): [cURL/60] (https://phabricator.marc-richter.info/api/conduit.ping) <CURLE_SSL_CACERT> There was an error verifying the SSL Certificate Authority while negotiating the SSL connection. This usually indicates that you are using a self-signed certificate but have not added your CA to the CA bundle. See instructions in "libphutil/resources/ssl/README". mr@judge:~$ ``` This is also true - `arc` recognized my self-signed cert and pointed me to read `libphutil/resources/ssl/README`, which contains the relevant info. But inside that file, it is quite unclear, that `curl.cainfo` is a PHP setting, usually defined in a `php.ini` somewhere. I thought it's a parameter which has to be set with `arc set-config`! That `arc` accepts this (unknown) parameter without complaining did not help to mind my mistake: ``` mr@judge:~$ arc set-config curl.cainfo ~/cacert.pem Set key 'curl.cainfo' = "~/cacert.pem" in user config (was null). mr@judge:~$ arc install-certificate Trying to connect to server... Usage Exception: Failed to connect to server (https://phabricator.marc-richter.info/api/): [cURL/60] (https://phabricator.marc-richter.info/api/conduit.ping) <CURLE_SSL_CACERT> There was an error verifying the SSL Certificate Authority while negotiating the SSL connection. This usually indicates that you are using a self-signed certificate but have not added your CA to the CA bundle. See instructions in "libphutil/resources/ssl/README". mr@judge:~$ ``` Fortunately, searching the web for `curl.cainfo` pointed me to PHP. This might be clarified by changing line 21 to: > If "curl.cainfo" PHP setting is not set (or you are using PHP older than 5.3.7, where the Or similar.

Hi everyone, I just started to use arcanist on a linux system in combination with an instance of Phabricator, which uses a self-signed SSL cert. All the hints `arc` printed were just great (even told which php-modules are missing - WOW)! When all requirements were met, I got this: ``` mr@judge:~$ arc install-certificate Trying to connect to server... Usage Exception: Failed to connect to server (https://phabricator.marc-richter.info/api/): [cURL/60] (https://phabricator.marc-richter.info/api/conduit.ping) <CURLE_SSL_CACERT> There was an error verifying the SSL Certificate Authority while negotiating the SSL connection. This usually indicates that you are using a self-signed certificate but have not added your CA to the CA bundle. See instructions in "libphutil/resources/ssl/README". mr@judge:~$ ``` This is also true - `arc` recognized my self-signed cert and pointed me to read [[https://secure.phabricator.com/T8914 | `libphutil/resources/ssl/README`]], which contains the relevant info. But inside that file, it is quite unclear, that `curl.cainfo` is a PHP setting, usually defined in a `php.ini` somewhere. I thought it's a parameter which has to be set with `arc set-config`! That `arc` accepts this (unknown) parameter without complaining did not help to mind my mistake: ``` mr@judge:~$ arc set-config curl.cainfo ~/cacert.pem Set key 'curl.cainfo' = "~/cacert.pem" in user config (was null). mr@judge:~$ arc install-certificate Trying to connect to server... Usage Exception: Failed to connect to server (https://phabricator.marc-richter.info/api/): [cURL/60] (https://phabricator.marc-richter.info/api/conduit.ping) <CURLE_SSL_CACERT> There was an error verifying the SSL Certificate Authority while negotiating the SSL connection. This usually indicates that you are using a self-signed certificate but have not added your CA to the CA bundle. See instructions in "libphutil/resources/ssl/README". mr@judge:~$ ``` Fortunately, searching the web for `curl.cainfo` pointed me to PHP. This might be clarified by changing line 21 to: > If "curl.cainfo" PHP setting is not set (or you are using PHP older than 5.3.7, where the Or similar.

Hi everyone, I just started to use arcanist on a linux system in combination with an instance of Phabricator, which uses a self-signed SSL cert. All the hints `arc` printed were just great (even told which php-modules are missing - WOW)! When all requirements were met, I got this: ``` mr@judge:~$ arc install-certificate Trying to connect to server... Usage Exception: Failed to connect to server (https://phabricator.marc-richter.info/api/): [cURL/60] (https://phabricator.marc-richter.info/api/conduit.ping) <CURLE_SSL_CACERT> There was an error verifying the SSL Certificate Authority while negotiating the SSL connection. This usually indicates that you are using a self-signed certificate but have not added your CA to the CA bundle. See instructions in "libphutil/resources/ssl/README". mr@judge:~$ ``` This is also true - `arc` recognized my self-signed cert and pointed me to read [[https://secure.phabricator.com/T8914 | `libphutil/resources/ssl/README`]], which contains the relevant info. But inside that file, it is quite unclear, that `curl.cainfo` is a PHP setting, usually defined in a `php.ini` somewhere. I thought it's a parameter which has to be set with `arc set-config`! That `arc` accepts this (unknown) parameter without complaining did not help to mind my mistake: ``` mr@judge:~$ arc set-config curl.cainfo ~/cacert.pem Set key 'curl.cainfo' = "~/cacert.pem" in user config (was null). mr@judge:~$ arc install-certificate Trying to connect to server... Usage Exception: Failed to connect to server (https://phabricator.marc-richter.info/api/): [cURL/60] (https://phabricator.marc-richter.info/api/conduit.ping) <CURLE_SSL_CACERT> There was an error verifying the SSL Certificate Authority while negotiating the SSL connection. This usually indicates that you are using a self-signed certificate but have not added your CA to the CA bundle. See instructions in "libphutil/resources/ssl/README". mr@judge:~$ ``` Fortunately, searching the web for `curl.cainfo` pointed me to PHP. This might be clarified by changing line 21 to: > If "curl.cainfo" PHP setting is not set (or you are using PHP older than 5.3.7, where the Or similar.