Installation with Moodle : Unknown SSL protocol error in connection to api.h5p.org:443

Hi BV,

Finally it's OK but I had to make php modifications.

The error was visible in mod/hvp/library_list.php but I had to modify lib/filelib.php and espacially :

function download_file_content

The SSL error came from proxy access.

I do the following (the commands are working on Ubuntu 16.04 server)  :

- system :

if not on system install curl :

sudo apt-get install curl

eventually install openssl (not sure it's necessary) :
sudo apt-get install openssl

- php.ini : activate curl and openssl extensions

- modify moodle file config.php and add (I prefered to put parameters in config.php) :

//-------------- Proxy ---------------------------
$CFG->curl_proxyenable=TRUE;
$CFG->curl_proxyport = '8080';
$CFG->curl_proxytype=0; // = CURLPROXY_HTTP;
$CFG->curl_proxy='myproxy';
$CFG->curl_proxyuserpwd='mydomain\myuser:hispassword';
$CFG->curl_proxyauth=8; // = CURLAUTH_NTLM

//--------------------------------------------------------

- modify lib/filelib.php and at the paragraph function download_file_content I had missing curl options :

if ($CFG->curl_proxyenable) {
    $options['CURLOPT_HTTPPROXYTUNNEL']=true;
    $options['CURLOPT_PROXYPORT']=$CFG->curl_proxyport;
    $options['CURLOPT_PROXYTYPE']=$CFG->curl_proxytype;
    $options['CURLOPT_PROXY']=$CFG->curl_proxy;
    $options['CURLOPT_PROXYUSERPWD']=$CFG->curl_proxyuserpwd;
    $options['CURLOPT_PROXYAUTH']=$CFG->curl_proxyauth;
}

Then I restarted the server but when I tested by clicking on the button "Update content type cache" on the "libraries H5P" page, I had another error :

SSL certificate error : unable to get local issuer certificate

I found on the net that I had to download a certificate file, for example :

https://curl.haxx.se/ca/cacert.pem

copy it in a moodle folder (example /var/www/html/moodle/certif)

then modifiy php.ini like this :

curl.cainfo = '/var/www/html/moodle/certif/cacert.pem'

I also modified the below line but I'm not sure it's necessary :

openssl.cainfo = '/var/www/html/moodle/certif/cacert.pem'

then restart php (I ran sudo service apache2 restart on ubuntu), and finally it's OK ...

It worked for me with our proxy but I think it depends on its configuration, environment and type and I'm not a PHP developper.

Regards

DG

Hi Eritz,

I don't really know NTLM but I think it's a protocol used by Microsoft to crypt communications between servers. For your configuration I don't know exactly what you must indicate.

For more informations, take a look at this page :

http://php.net/manual/en/function.curl-setopt.php

// = CURLAUTH_NTLM is just a comment (in PHP after // it's considered as a comment) for me to remember that CURLAUTH_NTLM constant has the 8 value.

If I only wrote : $CFG-W>curl_proxyauth=8; it's the same thing.

I think that if you have a network's administrator, that administers the proxy, ask him to give you (or create) an account  that have access to internet and indicates this account/password as $options['CURLOPT_PROXYUSERPWD'] value (try without using domain or workgroup name).

Anothers links :

https://curl.haxx.se/libcurl/c/CURLOPT_HTTPAUTH.html

https://beamtic.com/using-proxies-with-curl

Perhaps for the $CFG->curl_proxyauth parameter instead of CURLAUTH_NTLM put CURLAUTH_BASIC as value (or the equivalent number for this value) ?

Sorry I can't help you anymore.

Denis