l008com

The LetsEncrypt root certificate expired on October 1st. I'm running one old server that does not contain this certificate. So I had to manually add it to the operating system so curl and web browsers could again communicate with domains that use LetsEncrypt SSL. It was pretty easy and hacks like that are to be expected when running a server thats a bit old. But PHP still isn't working. Using stream_context_create( ), I'm still unable to connect to LetsEncrypt certificates. So it would seem that PHP is not using the system's certificate roots. Does it have it's own collection of certs somewhere? If so, is there a way I can verify that, and then add the new LetsEncrypt one to it?

I have a script that runs periodically by a launchd timer. I give the script a very tight timeout ( set_time_limit(120); ). Most of the time, my script works great. But every once in a while, one of the commands I run in an exec( ) call seems to hang. This of course is a problem because once the exec( ) call hangs, the php script hangs as time spent on exec( ) calls does not count towards the script's runtime. Furthermore since the script is still running, launchd doesn't call it again. So in this way, my script is entirely at the mercy of a command line program not having a problem. And if it does, I can't do anything about it. So while I could try to figure out why my particular command seems to go awry (which is its own weird issue), the bigger issue is how can I call command line programs in php in a way that don't allow a runaway command to lock up the whole script forever? I wish there was an exec( )-type function with timeout built in. Or even a script timelimit function that DID count pauses and external programs. Something to kill this!? Something other than a SECOND php script that would check on the first script and kill it when there is a problem. There MUST be a better solution than that? Any thoughts?