问题描述

最近在尝试通过 SMTP 和 GMail 发送邮件时遇到此错误.

Very recently encountered this error when trying to send mail via SMTP and GMail.

Warning: stream_socket_enable_crypto(): SSL operation failed with code 1.
OpenSSL Error messages: error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed in C:xampphtdocsportallibrariesphp_mailerclass.smtp.php on line 343
2017-12-05 09:48:03 SMTP Error: Could not connect to SMTP host. 
2017-12-05 09:48:03 CLIENT -> SERVER: QUIT 
2017-12-05 09:48:03 SMTP ERROR: QUIT command failed:

服务器地址是 https://gg-portal.com，并且 SSL 配置似乎正确(通过验证在线跳棋).

Server address is https://gg-portal.com, and SSL configuration seems correct (verified through online checkers).

PHPMailer 代码是...

PHPMailer code is...

$mail = new PHPMailer();
$mail->isSMTP();
$mail->Host = "smtp.gmail.com";
$mail->SMTPAuth = true;
$mail->Username = $this->_config["EmailUser"];
$mail->Password = $this->_config["EmailPass"];
$mail->SMTPSecure = "tls";
$mail->SMTPDebug = 1;
$mail->Port = 587;
$mail->FromName = $this->_config["Brand"];  
$mail->From     = $this->_config["EmailFrom"];
$mail->AddCC("...emailAddress...");
$mail->Subject  = "...subject...";
$mail->Body     = "...content...";
$mail->IsHTML(true);  
$mail->WordWrap = 50;
if(!$mail->Send()) {
    echo ' Message was not sent.';
    echo 'Mailer error: ' . $mail->ErrorInfo;
}

已经查看了建议证书问题的文档，尽管如上所述 SSL 设置似乎很好.已经在其他地方研究过这个问题，最流行的建议是绕过 SSL(有效)，但我不想这样做.

Have looked at the documentation which suggests certificate issues, though as stated SSL setup seems fine. Have looked into the issue elsewhere and most popular suggestions is to bypass the SSL (which works) however I'd prefer not to do this.

'context' => [
    'ssl' => [
        'verify_peer' => false,
        'verify_peer_name' => false,
        'allow_self_signed' => true
    ]
]

推荐答案

FIXED ISSUE FOR ME我通过下载更新的根证书文件并将我的 php.ini 文件指向它，在我的 windows php 环境中解决了这个问题.由于 Windows Server 2012 不再自动更新此文件，因此问题似乎不在于 gmail 的证书，而在于过时的根证书文件.从这里下载 cacert.pem:https://curl.haxx.se/docs/caextract.html.然后在 php.ini 中使用以下行指向它(假设您安装了 openssl.dll).

FIXED ISSUE FOR ME I fixed this issue in my windows php environment by downloading an updated root certificates file and pointing my php.ini file to it. It seems the problem was not with gmail's cert but rather with an outdated root certificate file due to windows server 2012 no longer updating this file automatically. Download cacert.pem from here: https://curl.haxx.se/docs/caextract.html. Then in php.ini use following line to point to it (assuming you have openssl.dll installed).

openssl.cafile={服务器上文件的路径}cacert.pem.

openssl.cafile={Path to the file on your server}cacert.pem.

修复了它，我不再需要像建议的那样绕过 SSL/TLS 验证.最终我需要让 Windows 使用 GPO 或 WSUS 自动更新根证书.请参阅 https:///serverfault.com/questions/541922/where-to-get-root-ca-certificates-for-windows-server-now-that-microsoft-no-longe

That fixed it and I no longer needed to bypass SSL/TLS verification like suggested. Ultimately I need to get windows to update root certs automatically using GPO or WSUS. see https://serverfault.com/questions/541922/where-to-get-root-ca-certificates-for-windows-server-now-that-microsoft-no-longe

这篇关于无法连接到 GMail SMTP (PHPMailer) - 证书验证失败的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持编程学习网！