Topic on Extension talk:Push/Flow

The error:

Dateitransfer fehlgeschlagen: Authentifizierung auf https://<site>/api.php ist fehlgeschlagen. 

shows up when configured for a 1.24.1 wiki. I know that the MediaWikiApi for 1.24.1 has been changed in an unfortunate incompatible way. Since this extension is from 2011 I am wondering whether

• SSL is the problem
• 1.24.1 is the problem

or something else. How would I debug this situation?

@Jeroen De Dauw

with my new debugging capabilities I found out that status.errors has "SSL certificate problem:unable to get local issuer certificate".

It would be good if such errors would (may be optionally) be propagated to the push-err-authentication message

https://github.com/BITPlan/Push/commit/cf393a32423bd8ae07af50a5587f847f20cfb9b9

has a commit with a few extra lines for error handling. The resulting message is:

Authentication at .../mediawiki/api.php(http-curl-error:SSL certificate problem: unable to get local issuer certificate) failed.

This is a major improvement in handling such situations

I am close to getting things fixed but unfortunately its a little messy.

So the natural attempt to add:

1. ini_set("openssl.cafile","BITPlanValidCerts.pem")
2. ini-set("curl.cainfo","BITPlanValidCerts.pem")

didn't work - you have to set these in the php.ini file. A curl https:// test then works

Mediawiki is different.

see also https://doc.wikimedia.org/mediawiki-core/master/php/HttpFunctions_8php_source.html getCertOptions() and

https://www.happyassassin.net/2015/01/12/a-note-about-ssltls-trusted-certificate-stores-and-platforms/

so

3. putenv("SSL_CERT_PATH=BITPlanValidCerts.pem");

looked promising - but doesn't seem to work on my PHP 5.6. environment. Even changing the PHP 5.6 version check in HttpFunctions didn't make a difference.

So a bit more debugging and I'll get back here.

https://github.com/BITPlan/Push/commit/3f68dd36a65ff6ad8c68df807c2c32311073dae4

fixes the issue by adding the curl.cainfo php ini setting to the curl options

Hurray!

See also http://stackoverflow.com/questions/34683050/how-can-i-push-a-page-from-one-mediawiki-to-another-ssl-based-wiki-with-self-sig

https://github.com/BITPlan/Push/pull/1 has the pull Request for this fix