SSL error in cakaPHP with extensions=php_openssl uncomment - cakephp

Question

I am using cakePHP and I am trying to get locally the profile picture in facebook after logging in using her/his facebook.
Saving is working fine, the only problem that I've been encountering is the SSL error,
Warning (2): file_get_contents(): SSL operation failed with code 1. OpenSSL Error messages:
error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed [APP\Controller\FacebookCpsController.php, line 98]
Warning (2): file_get_contents() [function.file-get-contents]: Failed to enable crypto [APP\Controller\FacebookCpsController.php, line 98]
Warning (2): file_get_contents(https://graph.facebook.com/10203572402389803/picture) [function.file-get-contents]: failed to open stream: operation failed [APP\Controller\FacebookCpsController.php, line 98]
Warning (2): file_put_contents(/files/user_profile) [function.file-put-contents]: failed to open stream: No such file or directory [APP\Controller\FacebookCpsController.php, line 99]
My controller name is FacebookCps.
and this is my line 98 and 99:
line 98: $image = file_get_contents('https://graph.facebook.com/'.$uid.'/picture');
line 99: file_put_contents('/files/user_profile', $image);
My extension=php_openssl is already uncomment in my php.ini (C:/xampp/php/phpini)
Thank you for any suggestion/help.

Answer 1

#Janelle Ann Lagatuz As the error says, ".... routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed ..." you should download a certificate bundle. Place it somewhere on web server where you can access it and giving the user permission to read the file. Then try this code:
$arrContextOptions=array(
"ssl"=>array(
"cafile" => "/path/to/bundle/ca-bundle.crt",
"verify_peer"=> true,
"verify_peer_name"=> true,
),
);
Their is another approach too, instead of passing the certificate, just put the verify_peer and verify_peer_name as false and pass it as follows (you can see the description of this method here: http://php.net/manual/en/migration56.openssl.php) :
<?php
$arrContextOptions=array(
"ssl"=>array(
"verify_peer"=>false,
"verify_peer_name"=>false,
),
);
$image = file_get_contents('https://graph.facebook.com/'.$uid.'/picture', false, stream_context_create($arrContextOptions));
echo $response; ?>
But remember, this is not good approach as you are not passing the certificate, this breaks SSL certification and is a security hole.