[wp-trac] [WordPress Trac] #25007: WP_HTTP_Fsockopen does not verify SSL certificates

WordPress Trac noreply at wordpress.org
Mon Sep 23 12:26:54 UTC 2013


#25007: WP_HTTP_Fsockopen does not verify SSL certificates
------------------------------+------------------
 Reporter:  rmccue            |       Owner:
     Type:  defect (bug)      |      Status:  new
 Priority:  normal            |   Milestone:  3.7
Component:  HTTP              |     Version:
 Severity:  major             |  Resolution:
 Keywords:  needs-unit-tests  |
------------------------------+------------------

Comment (by dd32):

 > I downloaded the standard .pem file from haxx.se and used.

 That's exactly what core is doing, so as long as you use WP_HTTP instead
 of cURL directly as you currently are, in 3.7+ it should just work on
 hosts that support HTTPS connections.

 If you have to specify a custom certificate file (ie. one which contains a
 specific hosts certificate, not the one from curl/haxx.se) then there's a
 parameter you can pass to WP_HTTP to specify an alternative certificate
 file.

--
Ticket URL: <http://core.trac.wordpress.org/ticket/25007#comment:49>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list