Issue
(I know this question may not be right place for stackoverflow, except that it DOES have programming implications, and possibly a programming solution)
Since the LetsEncrypt X3 expiry, all new certificates are being signed by X1. Older systems fail to validate this new certificate. Including ondrej's php5.6-curl module for ubuntu 14.04.
We've managed to install openssl 1.1.1b which validates the new certificates fine. We've managed to recompile a later version of curl which now also validates the certificates fine.
But php-curl still fails. I know the best solution is to get off ubuntu14.04/php5.6 but its not an option right now. Does anyone know how I might get php5.6-curl working with the new X1 certificates?
Solution
The instructions on this page worked for me to update certs on php5.6... https://support.deskpro.com/lt-LT/kb/articles/how-to-update-curl-trusted-root-certificates
Answered By - kyen99 Answer Checked By - Senaida (WPSolving Volunteer)