Unable to Get Local Issuer Certificate

[casbboy]

I admit I haven't updated my Vimeo php API for some time, as it has worked excellent so far. But today I'm getting greeted with this error:

Fatal error: Uncaught exception 'Vimeo\Exceptions\VimeoRequestException' with message 'Unable to complete request.[SSL certificate problem: unable to get local issuer certificate]' in /vimeo/src/Vimeo/Vimeo.php:156 Stack trace: #0 /vimeo/src/Vimeo/Vimeo.php(129): Vimeo\Vimeo->_request('https://api.vim...', Array) #1 /util/adm-vimeocheck.php(18): Vimeo\Vimeo->request('/me/videos/8033...', '', 'GET') #2 {main} thrown in /util/vimeo/src/Vimeo/Vimeo.php on line 156

Is there an easy fix? I tried just updating the Vimeo.php files but am getting other PHP errors from doing that.

All feedback appreciated.

[Rafaeltheraven]

Just ran into this issue as well, #73 helped for me, aka:

1. Download http://curl.haxx.se/ca/cacert.pem
2. Copy the text from that file into your vimeo-api/certificates/vimeo-api.pem

That fixed it for me.

[casbboy]

Just ran into this issue as well, #73 helped for me, aka:

1. Download http://curl.haxx.se/ca/cacert.pem
2. Copy the text from that file into your vimeo-api/certificates/vimeo-api.pem

That fixed it for me.

That did the trick. thank you!

[fergusweb]

Same for me - been using this code on a site for years without issue, until getting this error today. Replacing the existing certificate with the one mentioned above has fixed the error.

I'm a little concerned though - the new certificate file is a LOT longer, containing all those root certificates. So I ask: should we be using this file, or would something else be a better fit?

[IcarusSosie]

Hi !

Yesterday a client reported some vimeo contents missing from their website. After checking the logs, this is the error that was stopping the API calls from completing.

I was pretty happy to find a quick solution to fix their problem (thanks @Rafaeltheraven !), but I'm sharing @fergusweb's concerns. I'm hoping someone from the vimeo dev team or the main contributors could add some context to this thread, and confirm/infirm the current solution.

[Rafaeltheraven]

I've got the same concerns and agree it would be nice if Vimeo could provide us with a list of just the necessary root certs.

As for now however, the link I provided above leads to the exact same file as linked by the curl devs (at least, diff reports no difference). It's a conversion from the root CA list Mozilla bundles with Firefox. Given that I trust both Mozilla and the Curl devs (though you may of course feel otherwise), I'm content with this for now.

[aaronm67]

Cert pinning was removed from this library 2 years ago, #288.

We can recommend you few ways to fix this matter :

Update to the latest version of vimeo-php

Or

Download http://curl.haxx.se/ca/cacert.pem
Copy the text from that file into your vimeo-api/certificates/vimeo-api.pem
As well which includes CA root for Cloudflare Inc ECC CA-3 which is the issuer right now for api.vimeo.com since we have dropped cert pinning.

I've got the same concerns and agree it would be nice if Vimeo could provide us with a list of just the necessary root certs.

Please do not pin to a specific api.vimeo.com cert. These can and will change in the future without notice.

[IcarusSosie]

Hey @aaronm67, thanks for confirming !

[mohiuddin-ct]

I have resolved the issue using above solution.

Just ran into this issue as well, #73 helped for me, aka:

1. Download http://curl.haxx.se/ca/cacert.pem
2. Copy the text from that file into your vimeo-api/certificates/vimeo-api.pem

That fixed it for me.

I have resolved the issue using the above solution. Thanks.