How to solve the problem of cURL error 77 when connecting to Elasticsearch 8 using ThinkPHP6 and elasticsearch-php clients?

When the ThinkPHP6 framework combines elasticsearch-php client to connect to Elasticsearch 8, an SSL certificate configuration error may cause cURL error 77. This article analyzes this problem and provides solutions.

The problem reappears:

When connecting to Elasticsearch 8 with the following code, a cURL error 77 error occurred:

 $client = ClientBuilder::create()
    ->setHosts(['https://192.17.169.72:9200'])
    ->setBasicAuthentication('elastic', 'password copied during elasticsearch start')
    ->setCaBundle('/xx/http.p12')
    ->build();

The error message is similar to:

 <code>cURL error 77 (see [https://curl.haxx.se/libcurl/...](https://link.segmentfault.com/?enc=rv1VLeKAXPLUNrp4daNAwg==.fsUIGT9/WnWf8meSTQawew+reqNQogQnyve9RM4stjYRvWggaPQ2GgfrxnrmqPnyc2D1ma+lNbI0nKSskXnRPw==)) for [https://elastic:376_7786sX0E-...](https://link.segmentfault.com/?enc=SAA+3TBoCHMDll4Qik+FwA==.mMavfshEDe2qW07hHkbqar18P1i7dgqlUS7+NT4JqHrcGADfUgq9pRv0Wpls0cUXi8VNxMh5ozi1H2+fF2hXfYY4ErJUj73YjIp9gHFNTy4=)</code>

Solution:

cURL error 77 is usually related to SSL certificate verification failure. The solution is as follows:

1. Verify the CA certificate file path: carefully check whether the /xx/http.p12 path is correct and whether the file exists.

2. Confirm the CA certificate file format: Make sure the /xx/http.p12 file is in a valid PKCS#12 format. If not, format conversion is required.

3. Check the certificate trust chain: Verify that the CA certificate contains the complete certificate chain and make sure that the certificate of the Elasticsearch server is in the chain. An incomplete chain can cause verification failure.

4. Temporary Disable Certificate Verification (for debugging only): To troubleshoot other issues, certificate verification can be temporarily disabled, but this does not apply to production environments . Modify the code as follows:

 $client = ClientBuilder::create()
    ->setHosts(['https://192.17.169.72:9200'])
    ->setBasicAuthentication('elastic', 'password copied during elasticsearch start')
    ->setCaBundle('/xx/http.p12')
    ->setSslVerification(false) // Only used for debugging->build();

If the connection is successful after disabling certificate verification, the problem lies in the certificate configuration. Be sure to enable certificate verification in production to ensure the connection is secure.

By carefully checking the above points and ensuring that the CA certificate is configured correctly, cURL error 77 can be solved and Elasticsearch 8 is successfully connected.

The above is the detailed content of How to solve the problem of cURL error 77 when connecting to Elasticsearch 8 using ThinkPHP6 and elasticsearch-php clients?. For more information, please follow other related articles on the PHP Chinese website!