Symptoms
-
The Extensions Catalog tab shows one of the following error messages:
error setting certificate verify locations: CAfile: C:Program Files (x86)Pleskadminconfcacert.pem CApath: none
external server error
-
The same error may occur during Plesk update:
STDERR: Error in cURL request: error settings certificate verify locations:
CAfile: C:Program Files (x86)Pleskadminconfcacert.pem
CApath: none -
A WordPress installation via the Applications menu fails with one of the following errors:
Error: The following error has occurred during the download of application:
HTTP Error (0) https://cdn.apscatalog.plesk.com/all-app/WordPress.org/WordPress/5.2.1-273.aps?packager=PleskSharing Violation
-
Some WordPress packages can be 0 size in
%plesk_dir%varmoduleswp-toolkitpackages
-
Backup scheduler for domains at Domains > example.com > Backup Manager > Schedule may return the following error:
Server Error
500
PleskExceptionerror setting certificate verify locations: CAfile: C:Program Files (x86)Pleskadminconfcacert.pem CApath: none
Type PleskException
Message error setting certificate verify locations: CAfile: C:Program Files (x86)Pleskadminconfcacert.pem CApath: none
File Catalog.php
Line 83 -
Domains > example.com > Logs > Manage Log Files shows files with sizes bigger than the limit in Log Rotation. For example a file with 4Gb.
-
Running Daily Maintenance manually shows why the Daily Maintenance was failing, which is in charge of rotating logs:
C:> C:UsersAdministrator>"%plesk_dir%adminbinphp.exe" -dauto_prepend_file="" -ddisplay_errors=on "%plesk_dir%adminplibDailyMaintainancescript.php" daily
error setting certificate verify locations:
CAfile: C:Program Files (x86)Pleskadminconfcacert.pem
CApath: none
ERROR: Zend_Http_Client_Exception: Error in cURL request: error setting certificate verify locations:
CAfile: C:Program Files (x86)Pleskadminconfcacert.pem
CApath: none (Curl.php:455)
Cause
The cacert.pem
file located in %plesk_dir%adminconf
is corrupted or missing.
Resolution
Solution for Windows
-
Connect to the Plesk server via RDP
-
Download the
cacert.pem
file from the curl website. -
Put the downloaded
cacert.pem
file to%plesk_dir%adminconf
. -
Ensure that the following directives in
%plesk_dir%adminconfphp.ini
contains a valid path to thecacert.pem
curl.cainfo="C:Program Files (x86)Pleskadminconfcacert.pem"
openssl.cafile="C:Program Files (x86)Pleskadminconfcacert.pem"
Solution for Linux
-
Connect to the server using SSH.
-
Download the CA certificate from the official cURL website
# wget https://curl.haxx.se/ca/cacert.pem
- Replace
/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
file# mv cacert.pem
/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem