CURL - SSL certificate problem

I’ve upgraded to PHP Maker 2025.8 and now when generating scripts, I get the following error (fails on 100%):

Loading composer repositories with package information

https://repo.packagist.org could not be fully loaded (curl error 60 while downloading https://repo.packagist.org/packages.json: SSL certificate problem: unable to get local issuer certificate), package information was loaded from the local cache and may be out of date

In CurlDownloader.php line 365:

curl error 60 while downloading https://repo.packagist.org/p2/hkvstore/didom.json: SSL certificate problem: unable to get local issuer certificate

You may google “php curl ssl” and set up the certificate for your PHP properly first.

Thank you for your time in responding (it is appreciated), however time is not on my side at the moment and I will have to revert back to 2025.7

I have Googled as you said, and got to the following website: https://php.watch/articles/php-curl-windows-cainfo-fix

I did this:

1. Download the [`cacert.pem`](https://curl.se/ca/cacert.pem) file
2. Move the file to a directory accessible by PHP and the web server. For example, to `C:/php/cacert.pem`.
3. Edit the `php.ini` file and modify the `curl.cainfo` entry to point to the absolute path to the `cacert.pem` file.

[curl]
; A default value for the CURLOPT_CAINFO option. This is required to be an
; absolute path.
-;curl.cainfo =
+curl.cainfo = “C:/php/cacert.pem”

4. Optionally, restart the Web server (such as Apache) to reload the INI file.

I have restarted Apache, I even restarted my computer and still NO SUCCESS.

I just wish there were more clear instructions. As I said time is not on my side and this is not helping at all to struggle like this.

Thak you for your response.

You better don’t use C:\php\ where (under C:\) you don’t have permission by default. You may try put it at the same folder as php.ini (where you are sure that at least php.ini can be read) or any folder where your php.exe has permissions to read.

I discovered that my antivirus software (Avast) is blocking it. If I disable Avast, it works perfectly without copying the cacert.pem file. I have tested this without the modifications to the php.ini file.
Now to somehow add it to Avast so Avast wont block it.

Problem solved! In Avast, open Menu > Settings > General > Exceptions and then click on ADD EXCEPTION, under Website / Domain in the field Type in URL path, enter https://repo.packagist.org/* and click ADD.