curl_setopt cacert.pem per paypal

Question

Sto provando a impostare un gestore di callback per la verifica IPN (paypal). So cosa fa il ricciolo, ma non so che cosa sia "cacert.pem" (certificato ...?).

questo è dove il file callback.php fallisce (esiste):

curl_setopt($ch, CURLOPT_CAINFO, 'cacert.pem'); 
if(!($res = curl_exec($ch))) { 
    echo ("Got " . curl_error($ch) . " when processing IPN data"); 
    curl_close($ch); 
    exit; 
} 
curl_close($ch); 

Con il seguente messaggio di errore:

Got errore di certificato impostazione verificare posizioni: CAFile: cacert.pem capath : nessuno nel trattamento dei dati IPN

Così ho scaricato cacert.pem e copiati nella directory in cui il callback.php f il mio è.

Questo è un commento prima che il codice di cui sopra:

// In wamp like environments that do not come bundled with root authority certificates, 
// please download 'cacert.pem' from "http://curl.haxx.se/docs/caextract.html" and set the directory path 
// of the certificate as shown below. 

sto usando XAMPP, questo sarebbe il problema?

E infine questo è l'intero file php direttamente dalla pagina dello sviluppatore: https://www.x.com/developers/PayPal/documentation-tools/code-sample/216623

<?php 

// STEP 1: Read POST data 

// reading posted data from directly from $_POST causes serialization 
// issues with array data in POST 
// reading raw POST data from input stream instead. 
$raw_post_data = file_get_contents('php://input'); 
$raw_post_array = explode('&', $raw_post_data); 
$myPost = array(); 
foreach ($raw_post_array as $keyval) { 
    $keyval = explode ('=', $keyval); 
    if (count($keyval) == 2) 
    $myPost[$keyval[0]] = urldecode($keyval[1]); 
} 
// read the post from PayPal system and add 'cmd' 
$req = 'cmd=_notify-validate'; 
if(function_exists('get_magic_quotes_gpc')) { 
    $get_magic_quotes_exists = true; 
} 
foreach ($myPost as $key => $value) {   
    if($get_magic_quotes_exists == true && get_magic_quotes_gpc() == 1) { 
     $value = urlencode(stripslashes($value)); 
    } else { 
     $value = urlencode($value); 
    } 
    $req .= "&$key=$value"; 
} 


// STEP 2: Post IPN data back to paypal to validate 

$ch = curl_init('https://www.sandbox.paypal.com/cgi-bin/webscr'); 
curl_setopt($ch, CURLOPT_HTTP_VERSION, CURL_HTTP_VERSION_1_1); 
curl_setopt($ch, CURLOPT_POST, 1); 
curl_setopt($ch, CURLOPT_RETURNTRANSFER,1); 
curl_setopt($ch, CURLOPT_POSTFIELDS, $req); 
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 1); 
curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 2); 
curl_setopt($ch, CURLOPT_FORBID_REUSE, 1); 
curl_setopt($ch, CURLOPT_HTTPHEADER, array('Connection: Close')); 

// In wamp like environments that do not come bundled with root authority certificates, 
// please download 'cacert.pem' from "http://curl.haxx.se/docs/caextract.html" and set the directory path 
// of the certificate as shown below. 
curl_setopt($ch, CURLOPT_CAINFO, 'cacert.pem'); 
if(!($res = curl_exec($ch))) { 
    echo ("Got " . curl_error($ch) . " when processing IPN data"); 
    curl_close($ch); 
    exit; 
} 
curl_close($ch); 

// STEP 3: Inspect IPN validation result and act accordingly 

if (strcmp ($res, "VERIFIED") == 0) { 
    // check whether the payment_status is Completed 
    // check that txn_id has not been previously processed 
    // check that receiver_email is your Primary PayPal email 
    // check that payment_amount/payment_currency are correct 
    // process payment 

    // assign posted variables to local variables 
    $item_name = $_POST['item_name']; 
    $item_number = $_POST['item_number']; 
    $payment_status = $_POST['payment_status']; 
    $payment_amount = $_POST['mc_gross']; 
    $payment_currency = $_POST['mc_currency']; 
    $txn_id = $_POST['txn_id']; 
    $receiver_email = $_POST['receiver_email']; 
    $payer_email = $_POST['payer_email']; 

    $string = "------------------------\r\n"; 
    $string .= "item_name: ".$item_name."\r\n"; 
    $string .= "item_number: ".$item_number."\r\n"; 
    $string .= "payment_status: ".$payment_status."\r\n"; 
    $string .= "payment_amount: ".$payment_amount."\r\n"; 
    $string .= "payment_currency: ".$payment_currency."\r\n"; 
    $string .= "txn_id: ".$txn_id."\r\n"; 
    $string .= "receiver_email: ".$receiver_email."\r\n"; 
    $string .= "payer_email: ".$payer_email."\r\n"; 

    $fp = fopen('test.log', 'w'); 
    fwrite($fp, $string."\r\n"); 
    fclose($fp); 

} else if (strcmp ($res, "INVALID") == 0) { 
    // log for manual investigation 
} 
?> 

Answer 1

Come per il commento è necessario impostare la (piena) percorso di directory, se il file PEM si trova nella stessa directory come lo script allora questo dovrebbe funzionare:

curl_setopt($ch, CURLOPT_CAINFO, dirname(__FILE__) . '/cacert.pem'); 

Per una spiegazione di ciò che il file è cacert.pem, check this accepted answer.