"SSL operation failed with code 1" kommt wenn ich eine Erweiterung instalieren möchte

[atomfried]

Hallo,
ich wollte gerade eine Erweiterung installieren aber bekomme stattdesen immer diese Fehlermeldung:

$ /Applications/MAMP/bin/php/php7.3.29/bin/php -d memory_limit=4G -d max_execution_time=900 composer.phar update --no-ansi --no-interaction --prefer-dist --with-dependencies 'contao-legacy/news_opengraph'
Loading composer repositories with package information
The "https://legacy-packages-via.contao-community-alliance.org/packages.json" file could not be downloaded: SSL operation failed with code 1. OpenSSL Error messages:
error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed
Failed to enable crypto
failed to open stream: operation failed
https://legacy-packages-via.contao-community-alliance.org could not be fully loaded, package information was loaded from the local cache and may be out of date
The "https://legacy-packages-via.contao-community-alliance.org/packages.json" file could not be downloaded: SSL operation failed with code 1. OpenSSL Error messages:
error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed
Failed to enable crypto
failed to open stream: operation failed
https://legacy-packages-via.contao-community-alliance.org could not be fully loaded, package information was loaded from the local cache and may be out of date

Warning from https://repo.packagist.org: Support for Composer 1 is deprecated and some packages will not be available. You should upgrade to Composer 2. See https://blog.packagist.com/deprecating-composer-1-support/
Updating dependencies (including require-dev)

                                                                                                                                                                                                                                                          
  [Composer\Downloader\TransportException]                                                                                                                                                                                                                
  The "https://legacy-packages-via.contao-community-alliance.org/p/contao-legacy/avatar%24d2358d49cf26d007d3f64e6f26c87e320c4032abd3c8ab7540700d160dd12aac.json" file could not be downloaded: SSL operation failed with code 1. OpenSSL Error messages:  
  error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed                                                                                                                                                                       
  Failed to enable crypto                                                                                                                                                                                                                                 
  failed to open stream: operation failed

Merkwürdigerweise konnte ich ein paar Minuten eine andere Erweiterung problemlos installieren und es gab keine Fehlermeldung wegen des SSL Zertifikates.

In der Composer json habe ich auch folgendes einegetragen ("secure-http": false,):

    "config": {
        "preferred-install": "dist",
        "cache-dir": "cache",
        "component-dir": "../assets/components",
        "secure-http": false,
        "platform": {
            "php": "7.3.29"
        },
        "discard-changes": "stash"

Hat jemand ein Idee was ich noch versuchen könnte? Mich wundert vor allem das es eben noch funktioniert hat.

Danke!

EDIT: Ich hatte noch vergessen zu erwähnen das ich mir schon das alternative zertifkat runtergeladen habe (https://curl.se/ca/cacert.pem) und die PHP.ini angeapsst habe:

[curl]
; A default value for the CURLOPT_CAINFO option. This is required to be an
; absolute path.
curl.cainfo= "/Applications/MAMP/Library/OpenSSL/certs/cacert.pem"

[openssl]
; The location of a Certificate Authority (CA) file on the local filesystem
; to use when verifying the identity of SSL/TLS peers. Most users should
; not specify a value for this directive as PHP will attempt to use the
; OS-managed cert stores in its absence. If specified, this value may still
; be overridden on a per-stream basis via the "cafile" SSL stream context
; option.
openssl.cainfo= "/Applications/MAMP/Library/OpenSSL/certs/cacert.pem"
openssl.cafile= "/Applications/MAMP/Library/OpenSSL/certs/cacert.pem"


; If openssl.cafile is not specified or if the CA file is not found, the
; directory pointed to by openssl.capath is searched for a suitable
; certificate. This value must be a correctly hashed certificate directory.
; Most users should not specify a value for this directive as PHP will
; attempt to use the OS-managed cert stores in its absence. If specified,
; this value may still be overridden on a per-stream basis via the "capath"
; SSL stream context option.
openssl.capath = "/Applications/MAMP/Library/OpenSSL/certs"