IMAP - unable to get local issuer certificate

[nuttycoder]

Hi am having problems,

I'm building a mail reader for a uni project I want to login with different email providers which I have got working locally I can login with an gmail, aol, aim email address and see my mail.

I cannot do this on my bluehost server as I could not make outbound connections so I bought a dedicated IP and I always get unable to get local issuer certificate error like:


Certificate failure for imap.aol.com: /C=US/ST=Virginia/L=Dulles/O=America Online Inc./CN=AOL Member CA

I have spoken to bluehost about this its ongoing has been for days but as yet its not been resolved I was hoping someone knew what the problem is or how to fix it.

This is the code I use to login to the mail account



function login($username, $password){

//get form data
$username = trim($_POST['username']);
$password = trim($_POST['password']);

//strip all tags from varible
$username = strip_tags($username);
$password = strip_tags($password);

if($username == '' || $password == ''){
global $errorMessage;
$errorMessage = '<p><span class="warning">Please enter your email address and password!</span></p>';
}

$arr = explode('@', $username);
$host = trim(stripslashes($arr[1]));

if (preg_match("/karoo/i", $host)) {
$host = 'karoo.co.uk';
}


if($host == 'hotmail.com' || $host == 'hotmail.co.uk' || $host == 'msn.com' || $host == 'live.com' || $host == 'lycos.com' || $host == 'lycos.co.uk'){
global $errorMessage;
$errorMessage = '<p><span class="warning">Sorry Hotmail, msn, live, lycos users cannot use this service at this time.</span></p>'; }

if(!$errorMessage)
{

switch($host){
case "nuttycoder.net":
$host = '{mail.nuttycoder.net:143/notls/norsh}';
break;
case "karoo.co.uk":
$host = '{pop.karoo.co.uk:110/pop3}';
break;
case "aol.com":
$host = '{imap.aol.com:143/imap}';
break;
case "aim.com":
$host = '{imap.aol.com:143/imap}';
break;
case "lycos.co.uk":
$host = '{mail.lycos.co.uk:143/pop3}';
break;
case "yahoo.com":
$host = '{mail.yahoo.com:110/pop3}';
break;
case "hotmail.com":
$host = '{207.46.106.175:1863/imap}';
break;
case "msn.com":
$host = '{mail.pop3hot.com:143/imap}';
break;
case "googlemail.com":
$host = '{imap.gmail.com:993/imap/ssl}';
break;
case "gmail.com":
$host = '{imap.gmail.com:993/imap/ssl}';
break;
default:
$host = '{mail.'.$host.':143}';
}

if(@imap_open($host, $username,$password)or die(imap_last_error()))
{

$_SESSION['ho'] = $host;
$_SESSION['us'] = $username;
$_SESSION['pa'] = $password;

// reload the page
header('Location: '.$_SERVER['HTTP_REFERER']);
exit;
} else {
//make error message avalible outside of function
global $errorMessage;
// define an error message
$errorMessage = '<p><span class="warning">Sorry you cannot login there is a problem: '.imap_last_error()."</span></p>\n";
}
}
}


I'd really appreciate some help as my project is on hold until I can find a fix for this.

you can test the sample application at http://webguideuk.com/amail

[nuttycoder]

problem has been fixed:



The problem is, the certificate's aren't matching, the SSL certificates are set for gmail and aol websites, but because you're attempting to create a connection from webguideuk.com and not gmail.com or aol.com, the PHP imap interface is rejecting the connection because of the certificates. You'll need to add /novalidate-cert to you imap_open line so it doesn't check the certificates. See http://us.php.net/manual/en/function.imap-open.php for more information.