修复 Windows 上的 PHP HTTPS 证书颁发机构问题

SSL certificate problem: unable to get local issuer certificate

;curl.cainfo =
;openssl.cafile =

curl.cainfo = "C:\php\extras\ssl\cacert.pem"
openssl.cafile = "C:\php\extras\ssl\cacert.pem"

<?php
$response = file_get_contents("https://www.google.com");
echo $response ? "成功访问 Google！" : "访问失败！";

@echo off
setlocal enabledelayedexpansion

echo ================================================
echo      PHP HTTPS 证书一键修复工具 - By ChatGPT
echo ================================================

REM 获取 php.ini 路径
set /p PHP_PATH=请输入你的 PHP 安装目录（例如 C:\php）: 
set INI_PATH=%PHP_PATH%\php.ini
set CACERT_DIR=%PHP_PATH%\extras\ssl
set CACERT_PATH=%CACERT_DIR%\cacert.pem
set CACERT_URL=https://curl.se/ca/cacert.pem

REM 检查 php.ini 是否存在
if not exist "%INI_PATH%" (
    echo ❌ 错误：找不到 php.ini 文件：%INI_PATH%
    pause
    exit /b
)

REM 创建证书目录
if not exist "%CACERT_DIR%" (
    mkdir "%CACERT_DIR%"
)

REM 下载 cacert.pem
echo 📥 正在下载 CA 根证书...
powershell -Command "Invoke-WebRequest '%CACERT_URL%' -OutFile '%CACERT_PATH%' -UseBasicParsing"
if exist "%CACERT_PATH%" (
    echo ✅ 下载成功：%CACERT_PATH%
) else (
    echo ❌ 下载失败，请检查网络连接。
    pause
    exit /b
)

REM 备份 php.ini
copy "%INI_PATH%" "%INI_PATH%.bak" > nul
echo 🗂 已备份 php.ini 到：%INI_PATH%.bak

REM 修改 php.ini
echo 🛠 正在修改 php.ini...
set FOUND_CURL=0
set FOUND_OPENSSL=0
(
    for /f "usebackq delims=" %%a in ("%INI_PATH%") do (
        set "line=%%a"
        echo !line! | findstr /i "curl.cainfo" >nul && (
            echo curl.cainfo="%CACERT_PATH%"
            set FOUND_CURL=1
        ) || echo !line! | findstr /i "openssl.cafile" >nul && (
            echo openssl.cafile="%CACERT_PATH%"
            set FOUND_OPENSSL=1
        ) || echo !line!
    )
    if !FOUND_CURL! == 0 echo curl.cainfo="%CACERT_PATH%"
    if !FOUND_OPENSSL! == 0 echo openssl.cafile="%CACERT_PATH%"
) > "%INI_PATH%.tmp"

move /y "%INI_PATH%.tmp" "%INI_PATH%" >nul
echo ✅ 修改完成！

echo.
echo 🎉 已成功配置 CA 根证书！
echo 💡 请记得重启 Web 服务（如 Apache、Nginx 或 PHP-FPM）
pause