[wp-trac] [WordPress Trac] #25007: WP_HTTP_Fsockopen does not verify SSL certificates

WordPress Trac noreply at wordpress.org
Wed Aug 21 08:44:04 UTC 2013


#25007: WP_HTTP_Fsockopen does not verify SSL certificates
--------------------------+------------------
 Reporter:  rmccue        |       Owner:
     Type:  defect (bug)  |      Status:  new
 Priority:  normal        |   Milestone:  3.7
Component:  HTTP          |     Version:
 Severity:  major         |  Resolution:
 Keywords:                |
--------------------------+------------------

Comment (by dd32):

 > cURL needs to be given the same cacert for consistency.
 It does.

 > The cacert path isn't changeable via the options passed into WP HTTP.
 For people using self-signed certificates or non-standard stacks (e.g.
 intranets), this should be possible.
 This did cross my mind as well, however, my primary motivation here was to
 get it in a state that we could verify SSL certs from Root CA's, not even
 taking into account non-root-signed certs, which we can look at once we
 have the core stack working 100%

--
Ticket URL: <http://core.trac.wordpress.org/ticket/25007#comment:9>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list