Details
-
Bug
-
Status: Closed
-
Minor
-
Resolution: Duplicate
-
3.5.9
-
None
-
MOODLE_35_STABLE
Description
The mechanism in Moodle will complain if the chain contains ROOT certificate.
This test will fail:
// Check the chain.
if ($expectedissuer !== null) {
if ($expectedissuer !== $cert['Subject'] || $cert['Subject'] === $cert['Issuer'])
}
//admin/tool/mobile/classes/api.php::get_potential_config_issues()
The ROOT certs are optional in chain but many providers of SSL add them, so there should be no reason why Moodle complains.
Some argue that having the root in chain adds to latency, but I doubt it justifies the error in Moodle.
We had the issue with the Moodle app related to the certificate chain. We tried to log in to the Moodle app but was not getting authenticated.
I've modified the chain for this site to not contain the ROOT and it resolved the issue.
Probably this check is used in mobile app as well.