Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

SSL certificate bundles missing #70

Open
dktapps opened this issue Apr 9, 2019 · 2 comments
Open

SSL certificate bundles missing #70

dktapps opened this issue Apr 9, 2019 · 2 comments
Labels

Comments

@dktapps
Copy link
Member

dktapps commented Apr 9, 2019

This is problematic for functions which depend on features provided by openssl, such as https:// support in file_get_contents().

@dktapps
Copy link
Member Author

dktapps commented Jan 22, 2023

The following php.ini settings should address this for common operating systems:

openssl.cafile=/etc/ssl/cert.pem
openssl.capath=/etc/ssl/certs

I think it's best to rely on system SSL certificates rather than bundling our own, since that way they'll stay up to date with the system without needing to replace the PHP binary.

@dktapps dktapps changed the title openssl.cnf and cert.pem missing from Linux and Mac builds SSL certificate bundles missing Jun 6, 2023
@dktapps
Copy link
Member Author

dktapps commented Jun 6, 2023

It turns out this is also problematic for curl on both Windows and *nix. We've just never noticed because PM sets CURLOPT_VERIFYPEER to false in Internet::getURL()...

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

1 participant