---
title: Certificate issue with composer
url: "https://news.typo3.com/article/certificate-issue-with-composer"
description: "Due to a change of the SSL certificate for all *.typo3.org domains, some composer clients are not able to connect to composer.typo3.org anymore due to a outdated CA bundle."
image: "https://news.typo3.com/_assets/d1e01514e4c4a5b3147940fa2ec50682/Images/og-image-news.jpg"
date: 2026-06-11
modified: 2026-06-11
categories:
  - "Showcase & Success"
  - "Product Updates & Roadmap"
  - The Project
---

# Certificate issue with composer

- [The Project](https://news.typo3.com/article/category/the-project)
- [Showcase & Success](https://news.typo3.com/article/category/showcase-success)
- [Product Updates & Roadmap](https://news.typo3.com/article/category/product-updates-roadmap)

Certificate issue with composer
===============================

08 February 2018

Due to a change of the SSL certificate for all \*.typo3.org domains, some composer clients are not able to connect to composer.typo3.org anymore due to a outdated CA bundle.

- ![](https://news.typo3.com/typo3temp/assets/t3g/blog/gravatar/bbf959d8e683550c90ae922aff9145d8.jpeg)[Zoe Legacy](https://news.typo3.com/article/author/zoe-legacy)

The issue:

When calling composer commands an error is thrown about certificate verification failure. e.g.

```

$ composer update
Loading composer repositories with package informationThe "https://composer.typo3.org/packages.json" file could not be downloaded: SSL operation failed with code 1. OpenSSL Error messages:error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed
```

Or when installing a TER extension:

```

$ composer install

- Installing typo3-ter/static-info-tables (6.5.1): Downloading (failed)
Downloading (failed)
Downloading (failed)

  [Composer\Downloader\TransportException]
  The "https://extensions.typo3.org/extension/download/static_info_tables/6.5.1/t3x/" file could not be downloaded: SSL operation failed with code 1. OpenSSL Error messages:
  error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed
  Failed to enable crypto
  failed to open stream: operation failed
```

> To fix this issue, make sure your composer is using a current CA bundle which will include our CA ("DigiCert Global Root G2")

**Mac OS X:**
-------------

Look for the location of your cafile by:

```

php -r 'var_dump(openssl_get_cert_locations());'
```

Then set composer to use this (with the example in my case):

```

composer config --global cafile '<location of cafile>'
```

Example:

```

composer config --global cafile '/usr/local/etc/openssl/cert.pem'
```

**Windows:**
------------

<https://support.microsoft.com/en-us/help/931125/how-to-get-a-root-certificate-update-for-windows>

**Linux:**
----------

### **Debian:**

```

apt-get install --only-upgrade ca-certificates
```

### **RedHat / CentOS:**

```

yum update ca-certificates
```

 **We will update the solutions as soon as possible for the other OS.**

**Update 2018/02/13:**
 Due to a possible information leak in our CI setup, we re-issued our \*.typo3.org once again (same IM/CA certificate)

![](https://news.typo3.com/typo3temp/assets/t3g/blog/gravatar/b5c88386e5b1d8fca79d0652427922d2.jpeg)

About the Author

[Zoe Legacy](https://news.typo3.com/article/author/zoe-legacy)

[More posts by this author](https://news.typo3.com/article/author/zoe-legacy)