Answers.Body: <p>The error is coming from when Craft tries to send out an activation email for the new user.</p>
  
  <p>In Craft's email settings (Settings->Email), you're telling Craft to connect to your email provider over SSL (TLS), but it looks like your local OpenSSL certificate config is setup improperly on your box.</p>
  
  <p>More info here: <a href="https://github.com/PHPMailer/PHPMailer/wiki/Troubleshooting#php-56-certificate-verification-failure" rel="nofollow noreferrer">https://github.com/PHPMailer/PHPMailer/wiki/Troubleshooting#php-56-certificate-verification-failure</a></p>
  
  <p>I definitely wouldn't recommend their workaround of disabling SSL certificate verification as that opens up a slew of security issues, but would fix the local OpenSSL configuration.</p>
  
Answers.ContentLicense: CC BY-SA 3.0
Answers.CreationDate: 2017-10-03T22:52:25.940Z
Answers.LastActivityDate: 2017-10-03T22:52:25.940Z
Answers.UserDisplayName: Brad Bell
Body: <p>When either of two of our admin logins attempt to add a new admin user and select to send an activation email, we get this error message: </p>
  
  <blockquote>
    <p>Internal Server Error  stream_socket_enable_crypto(): SSL operation failed with code 1. OpenSSL Error messages: error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed</p>
  </blockquote>
  
  <p>Why is Craft CMS attempting to connect with SSL3 which is intentionally disabled at the server level due to known vulnerabilities?</p>
  
Tags: <error-message>
Title: Why is Craft CMS attempting to connect with SSL3
ThreadText: # Why is Craft CMS attempting to connect with SSL3
  
  (Asked by: username_0 on 2017-10-03)
  
  When either of two of our admin logins attempt to add a new admin user and select to send an activation email, we get this error message:
  
  > Internal Server Error stream\_socket\_enable\_crypto(): SSL operation failed with code 1. OpenSSL Error messages: error:14090086:SSL routines:ssl3\_get\_server\_certificate:certificate verify failed
  
  Why is Craft CMS attempting to connect with SSL3 which is intentionally disabled at the server level due to known vulnerabilities?
  
  **Tags:** error-message
  
  
  ---
  
  ## 1 answers
  
  ### Answer by username_1 on 2017-10-03. Score: 2
  
  The error is coming from when Craft tries to send out an activation email for the new user.
  
  In Craft's email settings (Settings->Email), you're telling Craft to connect to your email provider over SSL (TLS), but it looks like your local OpenSSL certificate config is setup improperly on your box.
  
  More info here: <https://github.com/PHPMailer/PHPMailer/wiki/Troubleshooting#php-56-certificate-verification-failure>
  
  I definitely wouldn't recommend their workaround of disabling SSL certificate verification as that opens up a slew of security issues, but would fix the local OpenSSL configuration.
  
  
  ---
  
  