Wordpress: RestAPI/loopback request are needed?

[Paul&John]

Hi!

Just upgraded PHP7.3 to 7.4 for one of my wordpress sites and now I'm getting these two 'critical issues' under site-health:

The REST API encountered an error Performance

The REST API is one way that WordPress and other applications communicate with the server. For example, the block editor screen relies on the REST API to display and save your posts and pages.

When testing the REST API, an error was encountered:

REST API Endpoint: https://www.domain.com/wp-json/wp/v2/types/post?context=edit
REST API Response: (http_request_failed) stream_socket_client(): SSL operation failed with code 1. OpenSSL Error messages: error:14094410:SSL routines:ssl3_read_bytes:sslv3 alert handshake failure stream_socket_client(): Failed to enable crypto stream_socket_client(): unable to connect to ssl://www.domain.com:443 (Unknown error)

Your site could not complete a loopback request Performance

Loopback requests are used to run scheduled events, and are also used by the built-in editors for themes and plugins to verify code stability.

The loopback request to your site failed, this means features relying on them are not currently working as expected.
Error: stream_socket_client(): SSL operation failed with code 1. OpenSSL Error messages: error:14094410:SSL routines:ssl3_read_bytes:sslv3 alert handshake failure stream_socket_client(): Failed to enable crypto stream_socket_client(): unable to connect to ssl://www.domain.com:443 (Unknown error) (http_request_failed)

Checkec openssl and it wasn't enabled even on 7.3 so I guess the issue is with some kind of ssl certificate? (got it via Cloudflare).. but my question is - are these two things really needed, or can I just ignore this?

Thanks

[NoWhErE]

Not sure if needed, but have you tried opening the URL in the first message to see if SSL is indeed working?

In your post it's: https://www.domain.com/wp-json/wp/v2...t?context=edit

so replace "domain.com" with your site and see if SSL works. If not, contact your host

[Mr Pheer]

I had that issue and I had to click "Force HTTPS" for my domain in my server's control panel.

[fuzebox]

Are you using cloudflare for ssl?

[Paul&John]

Originally Posted by NoWhErE

Not sure if needed, but have you tried opening the URL in the first message to see if SSL is indeed working?

In your post it's: https://www.domain.com/wp-json/wp/v2...t?context=edit

so replace "domain.com" with your site and see if SSL works. If not, contact your host

Loads fine via secure connection

Originally Posted by fuzebox

Are you using cloudflare for ssl?

Yes I'm on CF.

[Mr Pheer]

Originally Posted by Paul&John

Loads fine via secure connection



Yes I'm on CF.

Try setting SSL to Flexible

[Paul&John]

Already on Flexible, also using a plugin for it: Flexible SSL for CloudFlare (Fix For CloudFlare Flexible SSL Redirect Loop For WordPress)

[Paul&John]

PS: this issue wasnt reported by Wordpress before the upgrade from PHP 7.3 to PHP 7.4 so I guess it has something to do with it.

[Colmike9]

Someone mentioned before that a plugin named Rocket does this after a PHP upgrade. Might be that or some other plugin.

[Paul&John]

I dont have that one, the list of plugins I'm using:

Easy WP Meta Description
Flexible SSL for CloudFlare
Official StatCounter Plugin (not sure why I added this, I always just manually add the code into the footer on my other blogs)
Widget Options
Select XML Sitemap Generator for Google
XML Sitemap Generator for Google

[fuzebox]

Originally Posted by Paul&John

Yes I'm on CF.

Are you also running ssl on your server? 99% of Wordpress + SSL issues are because of cloudflare and the fact that the site can't access itself as it doesn't go through the SSL proxy.

[jamezon]

if you dont use rest api , its not a bad idea trying to disable it and see if things work. as far is know, its anyway mostly used by sneaky bots and hackers to brute force . not sure about newer versions of wp, i allways use classic editor and older versions of wp to keep things fast and simple..for newer plugins rest api might be necessary

[Freedom6995]

Originally Posted by Paul&John

I dont have that one, the list of plugins I'm using:

Easy WP Meta Description
Flexible SSL for CloudFlare
Official StatCounter Plugin (not sure why I added this, I always just manually add the code into the footer on my other blogs)
Widget Options
Select XML Sitemap Generator for Google
XML Sitemap Generator for Google

Disable your plugins and see what happens.

[fris]

should be it at least 7.4 for wp, 8.0 really.

which host is still at 7.3?

[Colmike9]

Originally Posted by Paul&John

I dont have that one, the list of plugins I'm using:

Easy WP Meta Description
Flexible SSL for CloudFlare
Official StatCounter Plugin (not sure why I added this, I always just manually add the code into the footer on my other blogs)
Widget Options
Select XML Sitemap Generator for Google
XML Sitemap Generator for Google

What's the difference between "Select" XML Sitemap Generator for Google vs the non-select version?

[Paul&John]

Originally Posted by Freedom6995

Disable your plugins and see what happens.

Too afraid to fuck up something, my guess is that none of those has to do anything with it except 'Flexible SSL for CloudFlare'.. but without that one the site wont work.

Originally Posted by fris

should be it at least 7.4 for wp, 8.0 really.

which host is still at 7.3?

Thats an unmanaged VPS at OVH.. but I got a managed one at a big adult host and my php there is even on a lower version (7.2)

Originally Posted by Colmike9

What's the difference between "Select" XML Sitemap Generator for Google vs the non-select version?

Accidentally put the 'select' on the list, there is only one xml plugin.

[fris]

Originally Posted by fuzebox

Are you also running ssl on your server? 99% of Wordpress + SSL issues are because of cloudflare and the fact that the site can't access itself as it doesn't go through the SSL proxy.

yes if you are using ssl on your server stop.

cloudflare uses the http url on your server, so if you have ssl enabled, and you have cloudflare you might either get massive redirect loops, or stuff breaking.

[Mr Pheer]

Just out of curiosity... are you using an adblocker in your browser?

If so, disable it for your site. I had an issue yesterday with certain plugins not working, wordpress was throwing errors, and it was my adblocker the whole time.

And I can duplicate it.

Error connecting to WordPress REST API. Disable ad-blocker for this page or unblock /wp-json/wp-statistics/v2/metabox in the ad-blocker configuration.

[fris]

Originally Posted by Paul&John

Too afraid to fuck up something, my guess is that none of those has to do anything with it except 'Flexible SSL for CloudFlare'.. but without that one the site wont work.



Thats an unmanaged VPS at OVH.. but I got a managed one at a big adult host and my php there is even on a lower version (7.2)



Accidentally put the 'select' on the list, there is only one xml plugin.

no host should be using an out of date version like 7.2, i thought vacares was bad enough for only 7.3

[Paul&John]

Originally Posted by Mr Pheer

Just out of curiosity... are you using an adblocker in your browser?

I have adblock disabled on my own sites.. I think the issue will be with the CF flexible thingy and not having a certificate on my server. So will setup lets encrypt via virtualmin then switch to FULL mode at CF.

[Paul&John]

Seems like the solution was easier after all. So at first I requested a lets encrypt certificate, enabled FULL mode at Cloudflare then disabled the Flexible plugin but didn't helped. Did a little more googling and installing php-curl module for 7.4 solved it. Interestingly curl wasn't installed for php 7.3.

[fris]

curl module should really be on all php installs

[Paul&John]

To tell you the truth I always thought it comes already with php