Typo3 cURL "SSL certificate not found" despite http verify set to "false"

Question

Error when trying to upgrade Typo3 or update an Extension via Backend (Server name obfuscated):

in typo3_src-10.4.26/vendor/guzzlehttp/guzzle/src/Handler/CurlFactory.php line 449

        if (!file_exists($cert)) {
            throw new \InvalidArgumentException(
                "SSL certificate not found: {$cert}"
            );
        }

Configuration setting is: $GLOBALS['TYPO3_CONF_VARS']['HTTP']['verify'] = false;

Beside setting via BE (LocalConfiguration.php) also tried additionally with entry in AdditionalConfiguration.php

Normally it should not verify the SSL certificate with this setting as far as I understood it. Is there something else I can do to debug or solve this error?

Environment Info:

• Typo3 10.4.26
• PHP Version 7.4.30
• cURL 7.64.0
• Certificate self signed certbot certificate
• Server: HostEurope WebServer Basic with Debian GNU/Linux 10 (buster),
  domain is the default HE server domain e.g. "wp12345678.server-he.de"

Answer 1

Try to set $GLOBALS['TYPO3_CONF_VARS']['HTTP']['cert'], and also provide the certificate in PEM format.

The link in the screenshot:
http://docs.guzzlephp.org/en/latest/request-options.html#cert

One reason that your setting $GLOBALS['TYPO3_CONF_VARS']['HTTP']['verify'] is not taken into account is that you have to clear the cache before the update perhaps.

Beside that, if the problem is only remarkable when you try to upgrade, you could do the upgrade manually.