SSL certificate for moodle.org

Synopsis

Cuando Usted, como administrador, intenta check for available updates o install an update, su sitio Moodle necesita comunicarse con moodle.org. Esta comunicación se hace por medio del protocolo seguro HTTPS. Su sitio Moodle valida el certificado SSL certificate de moodle.org (como en Moodle plugins directory) y verifica su identidad. Para pasar esta verificación, debe existir un certificado (en el formato PEM) de la autoridad certificadora (CA) que emitió el certificado para for moodle.org instalado en su servidor.

El certificado SSL para moodle.org ha sido emitido por DigiCert CA.

Problema

If this CA certificate is missing, the remote site (moodle.org) can not be verified and so your Moodle site will refuse to fetch the data (to protect you against so called man-in-the-middle attack). The exact location of the certificate on your server depends on the OS type and other settings. On Linux servers it may be typically found at /usr/share/ca-certificates/mozilla/DigiCert_High_Assurance_EV_Root_CA.crt for example.

A missing CA certificate results in an error when checking for available updates and attempting to install them.

Soluciones

Actualice su sistema operativo (recomendado)

The recommended way to fix this problem is to update your server's operating system so that it contains recent SSL certificates from common certificate authorities. For Debian and RedHat based distributions, these certificates are distributed in the ca-certificates package. Gentoo servers provide them via the app-misc/ca-certificates ebuild. It's also a good idea to make sure that the OpenSSL libraries (libssl) and cURL libraries (libcurl) are up-to-date on your server.

Proporcione manualmente el certificado certificate

If updating the operating system is not an option for you and the administrator of the server refuses to update the CA certificates on the server (despite there being no good reason for not doing so), a possible workaround is to download the bundle of required certificates from the cURL site. You need to download the file cacert.pem from there and put it into your moodledata/moodleorgca.crt file (i.e. download the cacert.pem file, rename it to moodleorgca.crt and upload it into your mooodledata). If this file is found in moodledata, Moodle will use it instead of relying on certificates provided by the operating system.

Debe resaltarse que la solución recomendada es tener el certificado CA en su sistema operativo tal como se describió anterioormente. La solución basada en on moodleorgca.crt solamente debería considerarse como un parche temporal.