The Curl adapter was also mentioned in this blog post:
You can set up the adapter using the [Http] section of VuFind's config.ini:
adapter = "Zend\Http\Client\Adapter\Curl"
curloptions[CURLOPT_SSL_VERIFYPEER] = true
curloptions[CURLOPT_SSL_VERIFYHOST] = 2
curloptions[CURLOPT_CAINFO] = "/etc/ssl/certs/ca-bundle.pem"
Let me know if you still have problems -- if that doesn't make a difference, I remain suspicious that you may be having trouble getting values passed from config.ini to the VuFind code. There's a simple sanity check to test if this is the case: set adapter to some garbage string -- if configurations are loading correctly, this will cause a fatal error when the framework fails to load a non-existent class. If setting a bad adapter doesn't break your code, then there is a configuration loading problem.
> -----Original Message-----
> From: Matthew Weier O'Phinney [mailto:matthew@...]
> Sent: Monday, September 16, 2013 4:23 PM
> To: fw-general@...
> Subject: Re: [fw-general] SSL issue
> On Mon, Sep 16, 2013 at 11:02 AM, Bryon Czoch <bczoch@...> wrote:
> > Hi all,
> > We recently moved our Horizon server behind SSL an we are now getting this
> error in Vufind(Built on ZF) on the Record view and cant seem to figure it
> > Message: Unable to enable crypto on TCP connection libcat.uchicago.edu: make
> sure the "sslcapath" option points to a valid SSL certificate directory
> > We set sslcapath, sslverifypeer and on our FreeBSD server to no avail.
> > This person had a similar issue:
> > Any help would be appreciated,
> This is an issue with the underlying stream context being used to
> negotiate SSL connections. The most expedient answer, and likely best,
> is to use the Curl adapter instead of the default Stream adapter, as
> it negotiates SSL more transparently and robustly.
> Matthew Weier O'Phinney
> Project Lead | matthew@...
> Zend Framework | http://framework.zend.com/
> PGP key: http://framework.zend.com/zf-matthew-pgp-key.asc
> List: fw-general@...
> Info: http://framework.zend.com/archives
> Unsubscribe: fw-general-unsubscribe@...