Unable to complete SSL/TLS handshake about pawl

[clue]

Thanks for the elaborate error report! 👍

It looks like this is not an issue in this library but actually how PHP tries to establish a secure TLS connection to this endpoint. This can easily be verified like this:

>>> $f = stream_socket_client('tls://connect-bot.classic.blizzard.com:443');
PHP warning:  stream_socket_client(): SSL operation failed with code 1. OpenSSL Error messages:
error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed on line 1

Does anybody happen to have any thoughts?

[user4B1D]

So i've been trying to do some sleuthing around, found out that openssl s_client -connect connect-bot.classic.blizzard.com:443
returns an error code: Verify return code: 21 (unable to verify the first certificate)

I contacted my webhosting provider (a2hosting.com) and they were kind enough to also help.

You may want to pass SSL Context Options on to your app developer... This can be found at the following URL:
http://php.net/manual/en/context.ssl.php

From my understanding having a chain like this we need the valid first level hostname cert name "*.blizzard.com"?

I am going to bed now though, i'll take a look at it after work tomorrow and see if I can commit something. (feel free to yourself though)

p.s.
Here is the official documentation on the API: https://d8un0y0mnd29o.cloudfront.net/public/Chat+Bot+API+Alpha+v2.pdf

It is recommended that the certificate is checked to ensure that the common name matches *.classic.blizzard.com

[user4B1D]

quick update: adding the context option for cafile got me to another error, but im making progress.

the ca file needed is: DigiCertSHA2HighAssuranceServerCA.crt for this particular server

next error is

Could not connect: HTTP/1.1 101 Switching Protocols Upgrade: WebSocket Connection: Upgrade Sec-WebSocket-Protocol: json Sec-WebSocket-Accept: (mumbo jumbo here)

[user4B1D]

edit: fixed

problem: user error

[clue]

Happy to see you've managed to solve this! In case anybody runs into similar problems, may I ask you for a short gist of the fixed code? 👍

[user4B1D]

I had missed the fact that the constructor for the connector paeses security options (SSL context options) so I added those and got past the cert failure with an included cafile. After that it told me the handshake failed. As per the rfc this was correct so I added the sub protocol option as json and it's working now.