第 24 章 FAQ

* Initializing NSS with certpath: sql:/etc/pki/nssdb
* NSS error -12286
* Error in TLS handshake, trying SSLv3...
		

重新編譯curl，同時禁用NSS

		
wget http://curl.haxx.se/download/curl-7.28.1.tar.gz
tar zxvf curl-7.28.1.tar.gz
cd curl-7.28.1
./configure --prefix=/srv/curl-7.28.1/ --without-nss --with-ssl && make &&make install
		
		

編譯PHP，同時指定curl目錄

		
./configure --prefix=/srv/php-5.2.17 \
--with-config-file-path=/srv/php-5.2.17/etc \
--with-config-file-scan-dir=/srv/php-5.2.17/etc/conf.d \
--with-libdir=lib64 \
--enable-fastcgi \
--enable-fpm \
--with-pear \
--with-curl=/srv/curl-7.28.1 \
--with-gd=shared \
--with-jpeg-dir=shared \
--with-png-dir=shared \
--with-freetype-dir=shared \
--with-zlib-dir \
--with-iconv=shared \
--with-mcrypt \
--with-mysql \
--with-pdo-mysql \
--with-mysql-sock=/var/lib/mysql/mysql.sock \
--with-openssl=shared \
--with-mhash=shared \
--with-sqlite=shared \
--with-pdo-sqlite=shared \
--with-xsl=shared \
--with-pear \
--enable-sockets \
--enable-soap \
--enable-mbstring \
--enable-magic-quotes \
--enable-inline-optimization \
--enable-gd-native-ttf \
--enable-zip \
--enable-xml \
--enable-ftp \
--enable-bcmath \
--enable-calendar \
--enable-sqlite-utf8 \
--enable-shmop \
--enable-dba \
--enable-wddx \
--enable-sysvsem \
--enable-sysvshm \
--enable-sysvmsg \
--disable-debug
		
		

解決後

* successfully set certificate verify locations:
*   CAfile: /etc/pki/tls/certs/ca-bundle.crt
  CApath: none
* SSL connection using DHE-RSA-AES256-SHA