Error since upgrading to https

[michaelstuartkelly]

There was an error while retrieving the URL specified: [ External links are visible to forum administrators only ]
HTTP Code:

HTTP headers:
x_csize: 0

HTTP output:

[XML-Sitemaps Support]

Probably there is a configuration problem - it looks like your server doesn't allow local network connections via port 80 (http) or 443 (https) - as a result sitemap generator is not able to crawl the site. This is usually related to firewall installed at the host - could you please contact your hosting support regarding this?

[michaelstuartkelly]

Hi,

We discovered the cause of the error. We are using Plesk 12.5 on Debian.

PHP cURL is not using an updated set of root certificates to verify server certs.

Around early September 2014, Mozilla removed the trust bits from the certs in their CA bundle that were still using RSA 1024 bit keys. This may lead to TLS libraries having a hard time to verify some sites if the library in question doesn't properly support "path discovery" as per RFC 4158. (That includes OpenSSL and GnuTLS.)

Resolution

Download the cacert.pem file from the main curl website [ External links are visible to forum administrators only ] .

Add the following into php.ini or add into 'Additional directives' under Websites & Domains > PHP settings :

curl.cainfo = /var/www/vhosts/WebSite.com/httpdocs/cacert.pem

Voila it now all works.

Regards
Michael

[XML-Sitemaps Support]

Hello,

thank you very much for this update and details on how the issue was resolved.