Issue
When you try to subscribe some websites by using FreshRSS, you would probably notice that there’re some issues to some certain websites(not all websites). The error prompt showing “cURL error 60” will pop up in logs, if you use “https”. But another error prompt showing “cURL error 59” would also pop up. Even you choose to use “http” and even turn off the selection – “Advanced – Verify SSL security” – as “NO”, the problem cannot be solved. By following the guide showing that try to add “#force_feed” to solve this problem, some websites still cannot be subscribed and same error prompts would still exist.
In simple terms, the fundamental factor causing the problems is SSL certificate, which causes verification issues. To solve the problem, we have to modify some configurations.
Solution
1
Directory
./FreshRSS/lib/lib_rss.php
Original Version:
if (isset($attributes[‘ssl_verify’])) {
$curl_options[CURLOPT_SSL_VERIFYHOST] = $attributes[‘ssl_verify’] ? 2 : 0;
$curl_options[CURLOPT_SSL_VERIFYPEER] = $attributes[‘ssl_verify’] ? true : false;
if (!$attributes[‘ssl_verify’]) {
$curl_options[CURLOPT_SSL_CIPHER_LIST] = ‘DEFAULT@SECLEVEL=1’;
}
}
Modified Version:
if (isset($attributes[‘ssl_verify’])) {
$curl_options[CURLOPT_SSL_VERIFYHOST] = $attributes[‘ssl_verify’] ? 2 : 0;
$curl_options[CURLOPT_SSL_VERIFYPEER] = $attributes[‘ssl_verify’] ? true : false;
}
Notice:
Basically, you need to DELETE two aforementioned lines – 「if (!$attributes[‘ssl_verify’]) {“」 & 「$curl_options[CURLOPT_SSL_CIPHER_LIST] = ‘DEFAULT@SECLEVEL=1’;」. And please DO NOT paste it, considering format issues.
And there’re two places you need to delete, which means you need to delete twice, please make sure you delete them both. After finishing the modification, you can now subscribe websites, with the selection “Advanced – Verify SSL security” off. But subscribing in third-party apps is not supported, unless you follow the following guide.
2
Directory
./FreshRSS/config.default.php
Original Version:
‘curl_options’ => array(
# Options to disable SSL/TLS certificate check (e.g. for self-signed HTTPS)
//CURLOPT_SSL_VERIFYHOST => 0,
//CURLOPT_SSL_VERIFYPEER => false,
Modified Version:
‘curl_options’ => array(
# Options to disable SSL/TLS certificate check (e.g. for self-signed HTTPS)
CURLOPT_SSL_VERIFYHOST => 0,
CURLOPT_SSL_VERIFYPEER => false,
