CP | Avisos failed with error 0

[FJSFerreira]

Error message: Unexpected response from upstream. cUrl error: SSL certificate problem: unable to get local issuer certificate (60) PHP error:
Query string: action=display&bridge=ComboiosDePortugal&format=Html
Version: dev.2021-04-25

[em92]

Ping @somini as maintainer of this bridge

[dvikan]

The problem is that www.cp.pt is not sending a complete certificate chain. They should include the intermediate ca cert "Sectigo RSA Domain Validation Secure Server CA" but they are not. I sent them a message regarding this.

Until they fix the issue from their side there are temporary solutions:

1. Add the ca cert manually. Download the cert from https://support.sectigo.com/articles/Knowledge/Sectigo-Intermediate-Certificates and drop it into /usr/local/share/ca-certificates and run sudo update-ca-certificates

2. Disable certificate validation in the curl call:

diff --git a/bridges/ComboiosDePortugalBridge.php b/bridges/ComboiosDePortugalBridge.php
index 610e23b..d6b0ac3 100644
--- a/bridges/ComboiosDePortugalBridge.php
+++ b/bridges/ComboiosDePortugalBridge.php
@@ -7,7 +7,9 @@ class ComboiosDePortugalBridge extends BridgeAbstract {
        const MAINTAINER = 'somini';
 
        public function collectData() {
-               $html = getSimpleHTMLDOM($this->getURI() . '/consultar-horarios/avisos')
+               $html = getSimpleHTMLDOM($this->getURI() . '/consultar-horarios/avisos', [], [
+            CURLOPT_SSL_VERIFYPEER => 0,
+        ])
                        or returnServerError('Could not load content');

[somini]

@dvikan Thanks for that, I can send a Merge Request with that small change.

It works on Firefox, I thought the browsers used the same certificates list?