Problem updating extensions with Mamp Pro 6.5, all show “Could not open update site...?

[Chacapamac]

Just try to updates my extensions on Mamp Pro 6.5 and I get theses errors when clearing the cache & clicking ªFind Updates”.

Could not open update sites.jpg

— If I click ªFind Updates” just after the errors ( Without clearing the cache) No errors?

• Happen on all my local websites — Doesn’t happen on live clones...

Not sure?

What is weird is that I know that Joomla connect correctly with all these adresses (Using Cyberduck)...

[Per Yngve Berg]

All the listed sites are https. It can be a SSL and certificate issue.

[Chacapamac]

Thanks Per Yngve Berg
For now the url are http. I see the same answer on other post. I just update to Mamp 6.5.
I will try to pass to https (never did before) and see how it work.

My live test environment with clones of the websites I test locally are not SSL and update without any warnings...

[Chacapamac]

I quote myself...

My live test environment with clones of the websites I test locally are not SSL and update without any warnings...

I work forever with Mamp, not using SSL & Joomla always update without problems also, Clones of the websites I test locally update without warnings on my live test server, without SSL.

The problem is the server, obviously.
— I switch to Mamp 6.5 lately. Curl is open and working, I’m trying other things...
— I close my Mac Firewall and Little Snitch — No success

[tourderein]

It appears that modifying a single Joomla file (/libraries/src/Http/Transport/cacert.pem) solve the problem. I tested on 2 sites and it works well, I found back a normal behavior and I coul update my extensions.

Solution consists in removing the DST Root CA X3 certificate from the cacert.pem file (obiously, make a backup of the file before).

Probably this "hack" will not be necessary any more in a few days and probably we could use it only during the time we need to update extensions.

[tourderein]

Works fine with MAMP PRO (6.5 with SSL) and on live sites

[Chacapamac]

Works fine with MAMP PRO (6.5 with SSL) and on live sites

I can confirm “tourderein”, it work????

Thank you, tourderein

How to:
1• Make a backup of Joomla root/libraries/src/Http/Transport/cacert.pem
2. Add .txt at the end of the file name, like this —>cacert.pem.txt
3. Open in TexEdit, remove the part for the DST Root CA X3 certificate, save and replace
— The code Look like this;

certi.jpg

I also put the original and modified files in zip (Just rename) for the people that don’t want to mess with the file

cacert.pem—ORIGINAL.txt.zip

cacert.pem-MODIFIED.zip

————————————————————————————————
Also cacert.pem is exactly the same for any site under Joomla 3.9.28 — I just check
————————————————————————————————

Can anybody explain the problem?

[tourderein]

Related to this : https://letsencrypt.org/docs/dst-root-c ... mber-2021/

This guy did some tests with different server configurations under Unix:
https://medium.com/geekculture/will-you ... 4a018df257
For me, it's written in Kryptonian! But it puts me on the right path.

"The test confirms if the client-side could be tuned to remove the expired DST X3 root certificate, it would work with “new default chain” certificate…"

With the removal of the outdated certificate, it seems that servers are forced to use the "new SSL protocol"

[tourderein]

Perhaps it's best to use cacert.pem from Joomla 3.10.2?

[Chacapamac]

Probably already change in Joomla 3.10/4 ?
For now, I’m staying on 3.9.28 as I see some incompatibility with 3.10...

[Chacapamac]

Perhaps it's best to use cacert.pem from Joomla 3.10.2?

Didn’t try that, make complete sens.

[Chacapamac]

All the listed sites are https. It can be a SSL and certificate issue.

It was a certificate Issue...

[tourderein]

Probably already change in Joomla 3.10/4 ?
For now, I’m staying on 3.9.28 as I see some incompatibility with 3.10...

I have to modify the cacert.pem file on Joomla 3.10.2

[sozzled]

There seem to be a few "certificate" problems lately.

[Chacapamac]

I joined the Joomla community over 13 years ago, and I continue to be impressed with the support provided by this forum. I have worked with several other CMSs, and the experience is nowhere near the calibre of Joomla. There is something special about this CMS and the people it unites.

Thanks, Everybody!

[Chacapamac]

Just have a question.
Does anybody know why it is working on a live website but not on Mamp??

[tourderein]

Just have a question.
Does anybody know why it is working on a live website but not on Mamp??

This works on my MAMP PRO 6.5 installation, in SSL, but only if I use the cacert.pem file of Joomla 10.x.

So, for example, with a good old Joomla 3.9.25 site, I have to replace the cacert.pem file of this site by the modified one of a Joomla 10.1 or 10.2 installation.

All servers are not equal in front of this problem, either on the client side (your site, because of the version of the cacert.pem file and because of the configuration of the server itself) or on the extensions update distribution side (for a reason I don't know — servers SSL config ? —, no problem with some extensions, and problem with others).

I had the problem at a hosting company (Joomla 3.9.25 to 3.10.2), on all my sites with them, and with MAMP PRO (Joomla 3.9.25 to 3.10.2). And no problem with another host (Joomla 3.10.2) without having to modify anything.

[Chacapamac]

tourderein

This works on my MAMP PRO 6.5 installation, in SSL, but only if I use the cacert.pem file of Joomla 10.x.

Just for infos
Taking out the DST Root CA X3 certificate in the original cacert.pem file of my Joomla 3.9.28 work perfectly on non-SSL websites in Mamp 6.5

Seem to work on SSL and non-SSL host