How to solve the problem of CURL error 77 when using elasticsearch-php to operate Elasticsearch8 in ThinkPHP6?

Troubleshooting the SSL problem of Elasticsearch-PHP connection to Elasticsearch8 under ThinkPHP framework

This article provides a solution to the CURL error 77 problem encountered when connecting to Elasticsearch8 with the ThinkPHP6 framework combined with elasticsearch-php client. This error is usually related to SSL certificate verification failure.

Problem phenomenon

Users use the following code to configure the elasticsearch-php client, and any operation will report an error:

 $client = ClientBuilder::create()
    ->setHosts(['https://192.17.169.72:9200'])
    ->setBasicAuthentication('elastic', 'password copied during elasticsearch start')
    ->setCaBundle('/xx/http.p12')
    ->build();

Error message: cURL error 77 (see [URL] for [URL])

Solution

CURL error 77 Indicates that SSL certificate verification failed. The solution is mainly focused on checking the configuration of CA certificate:

1. Certificate path verification: Double check whether the /xx/http.p12 path is correct and the file exists and is readable. Make sure there are no typos or extra spaces in the path.

2. Certificate content check: Verify the integrity and validity of the /xx/http.p12 certificate file. You can use the openssl command line tool to check whether the certificate is corrupt or expired.

3. Try different certificate formats: If there is a problem with the .p12 certificate format, try converting the certificate to .pem format, and then modify the path and file name of setCaBundle in the code.

4. Disable SSL verification (not recommended): As a last resort, SSL verification can be temporarily disabled, but this is extremely unsafe and is only used for debugging purposes. This method must not be used in production environments. The disable method is to add setVerify(false) in ClientBuilder :

 $client = ClientBuilder::create()
    ->setHosts(['https://192.17.169.72:9200'])
    ->setBasicAuthentication('elastic', 'password copied during elasticsearch start')
    ->setCaBundle('/xx/http.p12')
    ->setVerify(false) // Insecure, only used for debugging ->build();

Through the above steps, the system administrator should be able to resolve CURL error 77 and successfully connect to Elasticsearch 8. Remember to give priority to safe and reliable certificate verification methods to avoid security risks.

The above is the detailed content of How to solve the problem of CURL error 77 when using elasticsearch-php to operate Elasticsearch8 in ThinkPHP6?. For more information, please follow other related articles on the PHP Chinese website!