<p>The error is coming from when Craft tries to send out an activation email for the new user.</p>

<p>In Craft's email settings (Settings->Email), you're telling Craft to connect to your email provider over SSL (TLS), but it looks like your local OpenSSL certificate config is setup improperly on your box.</p>

<p>More info here: <a href="https://github.com/PHPMailer/PHPMailer/wiki/Troubleshooting#php-56-certificate-verification-failure" rel="nofollow noreferrer">https://github.com/PHPMailer/PHPMailer/wiki/Troubleshooting#php-56-certificate-verification-failure</a></p>

<p>I definitely wouldn't recommend their workaround of disabling SSL certificate verification as that opens up a slew of security issues, but would fix the local OpenSSL configuration.</p>

CC BY-SA 3.0
2017-10-03T22:52:25.940Z
2017-10-03T22:52:25.940Z
Brad Bell
<p>When either of two of our admin logins attempt to add a new admin user and select to send an activation email, we get this error message: </p>

<blockquote>
  <p>Internal Server Error  stream_socket_enable_crypto(): SSL operation failed with code 1. OpenSSL Error messages: error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed</p>
</blockquote>

<p>Why is Craft CMS attempting to connect with SSL3 which is intentionally disabled at the server level due to known vulnerabilities?</p>

<error-message>
Why is Craft CMS attempting to connect with SSL3
# Why is Craft CMS attempting to connect with SSL3

(Asked by: username_0 on 2017-10-03)

When either of two of our admin logins attempt to add a new admin user and select to send an activation email, we get this error message:

> Internal Server Error stream\_socket\_enable\_crypto(): SSL operation failed with code 1. OpenSSL Error messages: error:14090086:SSL routines:ssl3\_get\_server\_certificate:certificate verify failed

Why is Craft CMS attempting to connect with SSL3 which is intentionally disabled at the server level due to known vulnerabilities?

**Tags:** error-message


---

## 1 answers

### Answer by username_1 on 2017-10-03. Score: 2

The error is coming from when Craft tries to send out an activation email for the new user.

In Craft's email settings (Settings->Email), you're telling Craft to connect to your email provider over SSL (TLS), but it looks like your local OpenSSL certificate config is setup improperly on your box.

More info here: <https://github.com/PHPMailer/PHPMailer/wiki/Troubleshooting#php-56-certificate-verification-failure>

I definitely wouldn't recommend their workaround of disabling SSL certificate verification as that opens up a slew of security issues, but would fix the local OpenSSL configuration.


---

