[wp-trac] [WordPress Trac] #25007: WP_HTTP_Fsockopen does not verify SSL certificates

WordPress Trac noreply at wordpress.org
Wed Sep 4 06:23:11 UTC 2013


#25007: WP_HTTP_Fsockopen does not verify SSL certificates
------------------------------+------------------
 Reporter:  rmccue            |       Owner:
     Type:  defect (bug)      |      Status:  new
 Priority:  normal            |   Milestone:  3.7
Component:  HTTP              |     Version:
 Severity:  major             |  Resolution:
 Keywords:  needs-unit-tests  |
------------------------------+------------------

Comment (by dd32):

 > Are we going to be able to update this quickly enough when it changes?

 Answer is potentially yes, no, maybe.
 The certificate will only be able to be updated as fast as core updates,
 in the event that a CA included on the list is compromised, core would
 have to be updated to reflect that.

 We'll have to ensure that the file is re-built for each release (or at
 least checked), and we may also want to consider allowing it to be updated
 in a faster manner than with the core build (say through Auto-Updates)

--
Ticket URL: <http://core.trac.wordpress.org/ticket/25007#comment:23>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list