You are running composer with ssl tls protection disabled как исправить – Сайт, где вы сможете решить свои вопросы

composer create-project flarum/flarum . --stability=beta

I try to run this command, but it gave me this error.

  [RuntimeException]                                                           
  The openssl extension is required for SSL/TLS protection but is not availab  
  le. If you can not enable the openssl extension, you can disable this error  
  , at your own risk, by setting the 'disable-tls' option to true.

I tried to add “extension=php_openssl.dll” to “php.ini”, but it still got this error

marlo

6,7384 gold badges26 silver badges33 bronze badges

asked Feb 7, 2016 at 4:09

The same error occurred to me. I fixed it by turning off TLS for Composer, it’s not safe but I assumed the risk on my develop machine.

try this:

composer config -g -- disable-tls true

and re-run your Composer. It works to me!

But it’s unsecure and not recommended for your Server. The official website says:

If set to true all HTTPS URLs will be tried with HTTP instead and no network-level encryption is performed. Enabling this is a security risk and is NOT recommended. The better way is to enable the php_openssl extension in php.ini.

If you don’t want to enable unsecure layer in your machine/server, then setup your php to enable openssl and it also works. Make sure the PHP Openssl extension has been installed and enable it on php.ini file.

To enable OpenSSL, add or find and uncomment this line on your php.ini file:

Linux/OSx:

extension=php_openssl.so

Windows:

extension=php_openssl.dll

And reload your php-fpm / web-server if needed!

UPDATE:

As of PHP 7.4 the extension is named extension=openssl (known for Windows).

answered Feb 17, 2016 at 19:32

This issue occurs due to openssl and extension directory so uncomment below extensions in php.ini file

extension=php_openssl.dll

extension_dir = "ext"

Its works on my machine.

answered Mar 16, 2017 at 9:58

Vrushal RautVrushal Raut

1,0102 gold badges15 silver badges20 bronze badges

I had the exact same problem and couldn’t find a solution, so after thinking and looking for a while I figured that my PHP.INI apparently didn’t look in the correct directory for my PHP Extensions, so I went under:

“Directory in which the loadable extensions (modules) reside.”
And found the following:

; http://php.net/extension-dir
; extension_dir = "./"
; On windows:
;extension_dir = "ext"

And simply removed the ; infront of “extension_dir = “ext”, note this is only for Windows, remove the semicolon in front of the first extension_dir if you are running a different operating system.

I have no idea why mine wasn’t already unmarked, but it’s just something to look for if you are having problems.

answered Feb 16, 2017 at 22:32

According to the composer reference there are two relevant options: disable-tls and secure-http, which one can use. Just edit the configuration with: nano ~/.composer/config.json:

{
    "config": {
        "disable-tls": true,
        "secure-http": false
    }
}

Then it will complain about:

You are running Composer with SSL/TLS protection disabled.
Warning: Accessing getcomposer.org over http which is an insecure protocol.

But it performs the composer selfupdate (or whatever command).

One cannot simply “enable SSL in the php.ini” on Linux; PHP needs to be compiled with openSSL configured as shared library – in order to be able to access it from the PHP CLI SAPI.

answered Nov 19, 2016 at 7:52

To enable openssl go into php.ini and enable this line:

extension=php_openssl.dll

if you don’t want enable openssl you can set to composer not use openssl with this command:

composer config -g -- disable-tls true

however, this is a security problem.

answered Mar 8, 2017 at 19:53

Clairton LuzClairton Luz

2,06819 silver badges15 bronze badges

After trying everything, I finally managed to get this sorted. None of the above suggested solutions worked for me. My system is A PC Windows 10. In order to get this sorted I had to change the config.json file located here C:Users[Your User]AppDataRoamingComposer. In there, you will find:

{
    "config": {
        "disable-tls": true},
    "repositories": {
        "packagist": {
            "type": "composer",
            "url": "http://repo.packagist.org" // this needs to change to 'https'
        }
    }
}

where you need to update the packagist repo url to point to the ‘https’ url version.

I am aware that the above selected solution will work for 95% of the cases, but as I said, that did not work for me. Hope this helps someone.

Happy coding!

answered Aug 24, 2020 at 7:35

I had the same problem. I tried everything listed on this page. When I re-installed Composer it worked like before. I had a PHP version mismatch that was corrected with a new install establishing the dependencies with the PHP path installed in my system environment variables.

I DO NOT RECOMMEND the composer config -g -- disable-tls true approach.

By the way the way to reverse this is composer config -g -- disable-tls false.

answered Oct 22, 2019 at 19:59

I just add this because it worked for me, i install composer with the developer option activate (just check the box in the installer)

https://getcomposer.org/Composer-Setup.exe

I think this problem may occurs when you add a new version of php to your wamp server.
If you do this, you have to check if the extension_dir variable is configure to “env”.

Then check if the php_openssl.dll exist in your phpx.x/ext folder. If there is not php_openssl.dll, you have to download it here :
http://www.telecharger-dll.fr/dll-php_openssl.dll.html

If it still not working, check if your apache server use the good php.ini file by running the following cmd command :

php --ini

Configuration File (php.ini) Path: C:Windows
Loaded Configuration File:         C:wamp64binphpphp7.4.7x64php.ini
Scan for additional .ini files in: (none)
Additional .ini files parsed:      (none)

If the loaded configuration file return (none), you have to check your appache/apache2.4.41/conf/httpd.conf file is configure with the proper phpIniDir and the correct module.

It must be something like this :

PHPIniDir "${APACHE_DIR}/bin"
LoadModule php7_module "${INSTALL_DIR}/bin/php/php7.4.7x64/php7apache2_4.dll"

Then restart apache and check the “apache/apache2.4.41/bin/php.ini” (wich is the one configure above by PHPIniDir) it must me like

enter image description here

answered Jun 20, 2020 at 14:58

enter image description here
You are running Composer with SSL/TLS protection disabled.

 composer config --global disable-tls true
 composer config --global disable-tls false

answered Dec 2, 2020 at 2:06

For me on Windows 10 none of those worked … I had changed my local server from WAMP to Laragon and had to add the new path to the php.ini in the Environment Variables under:

Control Panel –> Advanced System Settings –> Environment Variables –> Path (double click) –> Browse… then navigate to the php.ini and click ok.

After that a reboot was needed and now composer works like a charm!

answered Mar 11, 2020 at 2:16

I had this issue on IIS on my new home server when attempting to install Magento. To fix it i added the above: extension=php_openssl.dll in my php.ini and then restarted my IIS server on Windows 10 Pro.

answered Apr 28, 2021 at 22:52

SebastianSebastian

3822 silver badges12 bronze badges

I was just having this issue, but these solutions weren’t working since I installed PHP and Apache independently without Xampp or Wamp.

The problem for me turned out to be that I was trying to run composer from Git for Windows instead of cmd or PowerShell—where it turned out to be working fine.

My solution was to add a symlink from my /c/php/php.ini (C:phpphp.ini) to my /bin/ directory (C:Program FilesGitbin).

answered Aug 29, 2022 at 4:53

lot of answers already, but this is what worked for me (in case someone still needs it)

Just upgraded from php 7.3.x to 7.4.33 in Windows 10, and this error occurred to me, so Just went back to the composer.exe installer, re-run the installation process once again pointing to the new php 7.4. folder, and it worked.

answered Dec 6, 2022 at 13:45

Источник

Solution 1

The same error occurred to me. I fixed it by turning off TLS for Composer, it’s not safe but I assumed the risk on my develop machine.

try this:

composer config -g -- disable-tls true

and re-run your Composer. It works to me!

But it’s unsecure and not recommended for your Server. The official website says:

If set to true all HTTPS URLs will be tried with HTTP instead and no network-level encryption is performed. Enabling this is a security risk and is NOT recommended. The better way is to enable the php_openssl extension in php.ini.

To enable OpenSSL, add or find and uncomment this line on your php.ini file:

Linux/OSx:

extension=php_openssl.so

Windows:

extension=php_openssl.dll

And reload your php-fpm / web-server if needed!

UPDATE:

As of PHP 7.4 the extension is named extension=openssl (known for Windows).

Solution 2

According to the composer reference there are two relevant options: disable-tls and secure-http, which one can use. Just edit the configuration with: nano ~/.composer/config.json:

{
    "config": {
        "disable-tls": true,
        "secure-http": false
    }
}

Then it will complain about:

You are running Composer with SSL/TLS protection disabled.
Warning: Accessing getcomposer.org over http which is an insecure protocol.

But it performs the composer selfupdate (or whatever command).

One cannot simply “enable SSL in the php.ini” on Linux; PHP needs to be compiled with openSSL configured as shared library – in order to be able to access it from the PHP CLI SAPI.

Solution 3

“Directory in which the loadable extensions (modules) reside.”
And found the following:

; http://php.net/extension-dir
; extension_dir = "./"
; On windows:
;extension_dir = "ext"

I have no idea why mine wasn’t already unmarked, but it’s just something to look for if you are having problems.

Solution 4

This issue occurs due to openssl and extension directory so uncomment below extensions in php.ini file

extension=php_openssl.dll

extension_dir = "ext"

Its works on my machine.

Solution 5

To enable openssl go into php.ini and enable this line:

extension=php_openssl.dll

if you don’t want enable openssl you can set to composer not use openssl with this command:

composer config -g -- disable-tls true

however, this is a security problem.

Comments

composer create-project flarum/flarum . --stability=beta

I try to run this command, but it gave me this error.

  [RuntimeException]                                                           
  The openssl extension is required for SSL/TLS protection but is not availab  
  le. If you can not enable the openssl extension, you can disable this error  
  , at your own risk, by setting the 'disable-tls' option to true.

I tried to add “extension=php_openssl.dll” to “php.ini”, but it still got this error

Recents

Источник

При попытке запустить эту команду, выходит эта ошибка

$ php composer.phar update
You are running Composer with SSL/TLS protection disabled.
Loading composer repositories with package information


  [ComposerDownloaderTransportException]
  curl error 35 while downloading https://repo.packagist.org/packages.json: error:1407742E:SSL routines:SSL23_GET_SERVER_HELLO:tlsv1 alert protocol version


update [--with WITH] [--prefer-source] [--prefer-dist] [--prefer-install PREFER-INSTALL] [--dry-run] [--dev] [--no-dev] [--lock] [--no-install] [--no-autoloader] [--no-scripts] [--no-suggest] [--no-progress] [-w|--with-dependencies] [-W|--with-all-dependencies] [-v|vv|vvv|--verbose] [-o|--optimize-autoloader] [-a|--classmap-authoritative] [--apcu-autoloader] [--apcu-autoloader-prefix APCU-AUTOLOADER-PREFIX] [--ignore-platform-req IGNORE-PLATFORM-REQ] [--ignore-platform-reqs] [--prefer-stable] [--prefer-lowest] [-i|--interactive] [--root-reqs] [--] [<packages>]...

Версия php

$ php -v
PHP 5.4.45 (cli) (built: Sep  2 2015 23:48:30)
Copyright (c) 1997-2014 The PHP Group
Zend Engine v2.4.0, Copyright (c) 1998-2014 Zend Technologies

Вывод команды

php -i

Обновил файл cacert.php с официального сайта.
Вставлял вместо файла

D:OpenServeruserdataconfigcacert.pem

Я же правильно заменил?

Не знаю что делать бьюсь уже пол дня. Подскажите как добиться того6 чтобы composer работал.

Источник

Problem :
I am trying to install Composer but I am getting the following error:

“Some settings on your machine make Composer unable to work properly. Make sure that you fix the issues listed below and run this script again:

The OpenSSL extension is missing, which means that secure HTTPS transfers are impossible. If possible you should enable it or recompile php with –with-openssl”

I have also gone into my php.ini-production and uncommented the following code: “extension=php_openssl.dll”

But still, it is not working for me, Am I missing something?

Solution :
I had also faced the same issue in the past, please follow the below approach to resolve your issue:

I doubt the “php.ini-production” is the dummy configuration file suitable for live environments. I will suggest you do a php -i at the console and also try to find the ‘php.ini’ path, to understand where it is expecting the ini file to be kept. It may be the case that normally it is expecting “php.ini”, and it may not actually exist. If that is the case then, copy the php.ini-development (or equivalent) to the location required.

This is very near the top of actually a very long output, so you may find it redirecting it to a file helpful (php -i > C:phpinfo.txt).

Another Solution :
I conceived “php.ini-production” is a dummy configuration file suitable for live environments. Do a php -i at the console and trace the ‘php.ini’ path, to view where it is expecting the ini file to be kept. This is generally expecting “php.ini”, and may not really exist – in case it does not, copy php.ini-development (or same) to the location requisite.

This is near the top of (a very long) output, hence you may trace redirecting it to a file useful

php -i > C:phpinfo.txt).
You will further require to uncomment the extension dir. For example, trace this line in your php.ini file:

;extension_dir = “ext”
Remove the semi-colon in front and save the file. I am certain this will perform.

Remember to open your php.ini Administrator mode

After altering anything in php.ini you have to restart your server, ensure that you did so first of all.

in WAMPserver edit this files:

D:wampbinphpphp5.3.10php.ini

D:wampbinphpphp5.4.12php.ini (based on version)

Do not employ the php.ini in the WAMP server menu. It will not perform. Go to the origin of your wamp and as defined above with D as root.

Create a php.ini (for example from php.ini-production), open it in an editor as admin (!), remove the commenting semicolon; in front of extension=php_openssl.dll, set the extension_dir accurately, and save the file. After that, it must be performed. However once again: open and edit the php.ini as admin.

In case you are employing MAMP on Windows, you require to alter the extension for php.ini-development to php.ini . After that, paste this line ;extension_dir = “ext” into the php.ini file, prior to the first extension appearing and uncommenting this other line ;extension=php_openssl.dll removing the prefixed semicolon. Remember to restart apache

A similar error happened to me. I solved it by turning off TLS for Composer, it’s not safe however I considered the risk on my development machine.

Attempt this:

composer config -g — disable-tls true
and re-run your Composer. It performs to me.

However, it’s not secure and not recommended for your Server. The official website says:

In the case set to true, all HTTPS URLs will be attempted with HTTP instead and no network-level encryption is worked. Enabling this is a security risk and is NOT recommended. The better method is to enable the php_openssl extension in php.ini.

In case you don’t want to enable unsecure layer in your machine/server, so setup your php to enable OpenSSL and it also performed. Ensure that the PHP Openssl extension has been installed and enable it on php.ini file.

To enable OpenSSL, add or trace and uncomment this line on your php.ini file:

Linux/OSx:

extension=php_openssl.so
Windows:

extension=php_openssl.dll
And reload your php-fpm / web-server in case reqired

For the composer reference, there are two relevant options: disable-tls and secure-http.

nano ~/.composer/config.json …
{
“config”: {
“disable-tls”: true,
“secure-http”: false
}
}
Thereafter it complains much:

You are running Composer with SSL/TLS protection disabled.
Warning: Accessing getcomposer.org over http which is an insecure protocol.
However, it works the composer selfupdate (or whatever).

while one cannot easily “enable SSL in the php.ini” on Linux; PHP requires to be compiled with openSSL configured as shared library – in order to be able to access it from the PHP CLI SAPI.

Hence, after inventioning and looking for a while I found that my PHP.INI obviously didn’t look in the accurate directory for my PHP Extensions, so I went under:

“Directory in which the loadable extensions (modules) reside.” And casting the following:

; http://php.net/extension-dir
; extension_dir = “./”
; On windows:
;extension_dir = “ext”
And easily removed the ; infront of “extension_dir = “ext”, note this is just for Windows, remove the semicolon in front of the first extension_dir in case you are running a different operating system.

Источник

(SOLVED BELOW) I am stuck for a few days now trying to effectively use composer to install phpspreadsheet on a php project I am working on for a client. Since phpspreadsheet requires php >= 7.2 I installed multiple versions of php (5.6, 7.1,2,3,4, 8.0) on my Linux drive (ubuntu 20.04.2 LTS focal).
I uninstalled an Ampps server which only had php7.1. Apache2 was already installed. I installed mysql-server 8.0 after some difficulties (until I purged the ampps installation).

Composer did install globally, and I did initialize a basic composer.json in my webroot directory. A /vendor dir was created containing a /composer dir.

My most recent composer.json file:

{
    "name": "john/t.cga.it8",
    "description": "cga website",
    "type": "project",
    "license": "proprietary",
    "authors": [
        {
            "name": "John Loughran",
            "email": "example@gmail.com"
        }
    ],
    "minimum-stability": "dev",
    "require": {}
}

If I run $ composer diagnose from the web root dir in the terminal I got the following error:

[ComposerExceptionNoSslException]                                                                        
The openssl extension is required for SSL/TLS protection but is not available. If you can not enable the openssl extension, you can disable 
this error, at your own risk, by setting the 'disable-tls' option to true.

Attempts to run $ composer update or upgrade stall with the same error.

When, as suggested, I configure composer to run without SSL using $ composer config -g -- disable-tls true I get the following, in full technicolor:

You are running Composer with SSL/TLS protection disabled.
Checking composer.json: OK
Checking platform settings: FAIL

The openssl extension is missing, which means that secure HTTPS transfers 
are impossible.
If possible you should enable it or recompile php with --with-openssl

The zlib extension is not loaded, this can slow down Composer a lot.
If possible, enable it or recompile php with --with-zlib

A php.ini file does not exist. You will have to create one.
If you can not modify the ini file, you can also run `php -d option=value` 
to modify ini values on the fly. You can use -d multiple times.

Checking git settings: OK
Checking http connectivity to packagist: OK
Checking https connectivity to packagist: FAIL
[ComposerDownloaderTransportException] The "https://repo.packagist.org 
/packages.json" file could not be downloaded: Unable to find the wrapper 
"https" - did you forget to enable it when you configured PHP? 
failed to open stream: No such file or directory

Composer is configured to disable SSL/TLS protection. This will leave 
remote HTTPS requests vulnerable to Man-In-The-Middle attacks. 
Checking github.com rate limit: FAIL
[ComposerDownloaderTransportException] The "https://api.github.com 
/rate_limit" file could not be downloaded: Unable to find the wrapper 
"https" - did you forget to enable it when you configured PHP? 
failed to open stream: No such file or directory

Checking disk free space: OK
Checking pubkeys: 
Tags Public Key Fingerprint: <I removed the public keys here and below> 
Dev Public Key Fingerprint: 
OK
Checking composer version: Warning: Accessing getcomposer.org over http which is an insecure protocol.
OK

Composer version: 2.0.14
PHP version: 7.4.16
PHP binary path: /usr/local/bin/php 

OpenSSL version: missing
cURL version: missing, using php streams fallback, which reduces performance
zip: extension not loaded, unzip present

To answer some of the points in the errors:

Openssl IS installed, using snaps, in non standard locations. From the browser the php function loaded_extension('openssl') returns true. Based on advice from https://www.php.net/manual/en/imap.requirements.php I made a symlink from where I found the openssl file as:
$ ln -s /usr/bin/openssl /usr/local/ssl and similarly $ ln -s /usr/local/ssl/include /usr/include/openssl.
Based on advice from Luke Welling’s books I installed JPEG, PNG, IMAP and zlib libraries.
To address the php.ini “missing” issue, from the terminal I got:

john@john-desktop:~$ php7.4 -i | grep -i openssl
Warning: PHP Startup: Unable to load dynamic library 'openssl' (tried: 
/usr/lib/php/20190902/openssl (/usr/lib/php/20190902/openssl: cannot open
 shared object file: No such file or directory), /usr/lib/php/20190902
/openssl.so (/usr/lib/php/20190902/openssl.so: cannot open shared object 
file: No such file or directory)) in Unknown on line 0

SSL Version => OpenSSL/1.1.1f
libSSH Version => libssh/0.9.3/openssl/zlib
openssl
OpenSSL support => enabled
OpenSSL Library Version => OpenSSL 1.1.1f  31 Mar 2020
OpenSSL Header Version => OpenSSL 1.1.1f  31 Mar 2020
Openssl default config => /usr/lib/ssl/openssl.cnf
openssl.cafile => no value => no value
openssl.capath => no value => no value
Native OpenSSL support => enabled

Perhaps my symlinks are wrong? Some configuration seems wrong but I am not sure how to fix it.

I do have php.ini files. For php7.4 the main one that phpinfo() shows is loading (in the browser) is in /etc/php/7.4/fpm/. I have left this unaltered but added a phpcustomjl.ini file (with priority 01) in /etc/php/7.4/mods-enabled/ which is symlinked by the system from /etc/php/7.4/fpm/conf.d/. It shows up in phpinfo() from the browser among the Additional .ini files parsed. I learned to use $ sudo systemctl restart php7.4-fpm after making changes to it, so that these changes take effect. The relevant lines from the .ini file are:

extension=zlib
;extension=/usr/lib/ssl
;extension=/usr/bin/openssl
extension=openssl
;extension=php_openssl

$ php7.4 --ini shows that this file is loaded in the cli. It outputs:

Warning: PHP Startup: Unable to load dynamic library 'openssl' (tried: /usr/lib/php/20190902/openssl (/usr/lib/php/20190902/openssl: cannot open shared object file: No such file or directory), /usr/lib/php/20190902/openssl.so (/usr/lib/php/20190902/openssl.so: cannot open shared object file: No such file or directory)) in Unknown on line 0

Warning: Module 'curl' already loaded in Unknown on line 0
Configuration File (php.ini) Path: /etc/php/7.4/cli
Loaded Configuration File:         /etc/php/7.4/cli/php.ini
Scan for additional .ini files in: /etc/php/7.4/cli/conf.d
Additional .ini files parsed:      /etc/php/7.4/cli/conf.d/01-phpcustomjl.ini,

This shows that the custom ini file is being read from the cli, so some setting in it must be faulty perhaps?

When I run $ php -v in the terminal I get PHP 7.4.16 (cli). In the browser when I want to enable php7.4 (as it is currently) I use a .htaccess file in the web root, with SetHandler "proxy:unix:/var/run/php/php7.4-fpm.sock|fcgi://localhost/" in a directive.

I hope I have enough details for someone to figure out the problem, or suggest any strategies. Until then I am stuck! Any help you can offer would be greatly appreciated. 🙂
John

Источник

Solution 1

Solution 2

Solution 3

Solution 4

Solution 5

Comments

Recents

Вам также может понравиться

Как составить путевую заметку

Как найти моба minecraft

Штукатурка отвалилась как исправить

Добавить комментарий Отменить ответ