Help~ My code suddenly not working last night again

[yueshiou]

First of all. Again many thanks to you for this code. I have used it to make a small business for 4 years.

It was working very well. But it suddenly doesn't work last night. and I got a error message :

• Peer certificate cannot be authenticated with known CA certificates

Can anyone please help me? how to fix it?And what happen?

[sendapp@localhost www]$ php yue.php

• About to connect() to fmipmobile.icloud.com port 443 (#0)
• Trying 17.248.223.2... * connected
• Connected to fmipmobile.icloud.com (17.248.223.2) port 443 (#0)
• Initializing NSS with certpath: sql:/etc/pki/nssdb
• CAfile: /etc/pki/tls/certs/ca-bundle.crt CApath: none
• Peer's certificate issuer is not recognized: 'C=US,O=Apple Inc.,OU=Certification Authority,CN=Apple Server Authentication CA'
• NSS error -8179
• Closing connection #0
• Peer certificate cannot be authenticated with known CA certificates
• About to connect() to fmipmobile.icloud.com port 443 (#0)
• Trying 17.248.223.2... * connected
• Connected to fmipmobile.icloud.com (17.248.223.2) port 443 (#0)
• CAfile: /etc/pki/tls/certs/ca-bundle.crt CApath: none
• Peer's certificate issuer is not recognized: 'C=US,O=Apple Inc.,OU=Certification Authority,CN=Apple Server Authentication CA'
• NSS error -8179
• Closing connection #0
• Peer certificate cannot be authenticated with known CA certificates

[sendapp@localhost www]$

[zuidwijk]

I think they changes something at Apple's side. I had the same sort code (created my own) and it doesn't work anymore. It gives no response.

Part of my code: curl -s -X POST -L -u '".$arrDevice['email'].":".$arrDevice['pass']."' -H 'Content-Type: application/json; charset=utf-8' -H 'X-Apple-Find-Api-Ver: 2.0' -H 'X-Apple-Authscheme: UserIdGuest' -H 'X-Apple-Realm-Support: 1.0' -H 'User-agent: Find iPhone/1.3 MeKit (iPad: iPhone OS/4.2.1)' -H 'X-Client-Name: iPad' -H 'X-Client-UUID: 0cf3dc501ff812adb0b202baed4f37274b210853' -H 'Accept-Language: en-us' -H 'Connection: keep-alive' https://fmipmobile.icloud.com/fmipservice/device/".$arrDevice['email']."/initClient

[jakehaas]

It looks like the issue has to do with Apple changing their SSL certificate. As a temporary solution, I modified the library to skip SSL checking when doing CURL requests:

In the curlPOST function I added this: curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, FALSE);

And then it started working again. This is not an ideal solution, but I really needed to get it working ASAP.

[Egregius]

Thank you for this temporary workaround! Works again for now.

[zuidwijk]

Better wait till it’s fixed. Never send your Apple ID over an unsecured line...