Make WordPress Core

Opened 4 years ago

Closed 4 years ago

#50748 closed defect (bug) (wontfix)

Fatal error on Site Health screen: "Please don't turn CURLOPT_SSL_VERIFYHOST off"

Reported by: lxjtian's profile lxjtian Owned by:
Milestone: Priority: normal
Severity: normal Version: 5.5
Component: Site Health Keywords: close
Focuses: Cc:


WordPress 5.5 Beta 3

PHP 7.4

when I click show error below

Fatal error: [snuffleupagus][disabled_function] Aborted execution on call of the function 'curl_setopt', because its argument '$option' content (81) matched the rule 'Please don't turn CURLOPT_SSL_VERIFYHOST off.' in /home/aiyahu/public_html/wp-includes/Requests/Transport/cURL.php on line 150

Change History (5)

#1 @SergeyBiryukov
4 years ago

  • Component changed from General to Site Health

#2 @SergeyBiryukov
4 years ago

  • Summary changed from WordPress 5.5 Beta 3 error to Fatal error on Site Health screen: "Please don't turn CURLOPT_SSL_VERIFYHOST off"

#3 @Clorith
4 years ago

  • Keywords close added; PHP74 removed

Hiya, and welcome to the WordPress trac!

It looks like you've got some kind of security rules in place that do not allow applications to disable SSL verification on remote requests. There's not much we can do about this, unfortunately, although you could use the https_local_ssl_verify filter and return true on it (quickly done with add_filter( 'https_local_ssl_verify', '__return_true' );)

You will find that the same code is used when doing a loopback check, and when editing plugin or theme files. The reason it disables ssl verification is that it is connecting to it self (the same site), which can in some cases cause ssl certs to incorrectly be read as invalid.

as there's not much we can do about this, I'm going to suggest we close this ticket, but I'll leave it open for your input, as you may know more about the security rules you are using here.

#4 @Clorith
4 years ago

  • Severity changed from critical to normal

#5 @johnbillion
4 years ago

  • Milestone Awaiting Review deleted
  • Resolution set to wontfix
  • Status changed from new to closed

Agreed, this is something you need to speak with your web host about. Best of luck!

Note: See TracTickets for help on using tickets.