XF 1.5 Image proxy issue with specific domains

[Jake B.]

Someone is trying to embed the image https://www.urvapin.com/media/catalog/product/s/m/smok-g-priv-2-kit-1.jpg into a post, but it's rejecting with this error when I test it in the "Test image proxy" tool: https://www.urvapin.com/media/catalog/product/s/m/smok-g-priv-2-kit-1.jpg could not be fetched or is not a valid image. The specific error message was: Unable to Connect to ssl://www.urvapin.com:443. Error #0:

have tried to use wget to attempt to download it on the server and get an error about the SSL certificate not being recognized:

--2017-12-01 11:00:09--  https://www.urvapin.com/media/catalog/product/s/m/smok-g-priv-2-kit-1.jpg

Resolving www.urvapin.com (www.urvapin.com)... 45.79.66.30

Connecting to www.urvapin.com (www.urvapin.com)|45.79.66.30|:443... connected.

ERROR: cannot verify www.urvapin.com's certificate, issued by ‘/C=US/ST=Arizona/L=Scottsdale/O=GoDaddy.com, Inc./OU=http://certs.godaddy.com/repository//CN=Go Daddy Secure Certificate Authority - G2’:

  Unable to locally verify the issuer's authority.

To connect to www.urvapin.com insecurely, use `--no-check-certificate'.

Anyone else run into a similar issue with GoDaddy SSLs?

 

[Jake B.]

Edit: Seem to be able to replicate here, not sure of the best fix for it, however

 

[Mike]

See: https://www.ssllabs.com/ssltest/analyze.html?d=www.urvapin.com&hideResults=on&latest

The site's certificate change is not complete. It requires extra downloads to get back to the root certificate, which isn't something normally done by cURL/PHP/OpenSSL, though browsers may do. The site in question needs to bundle their certificates together.