[wp-trac] [WordPress Trac] #34794: CURLOPT_SSL_VERIFYHOST should be set to 2 or not be set at all

WordPress Trac noreply at wordpress.org
Mon Nov 30 04:31:35 UTC 2015


#34794: CURLOPT_SSL_VERIFYHOST should be set to 2 or not be set at all
--------------------------+-----------------------------
 Reporter:  FriendlyGreg  |       Owner:  johnbillion
     Type:  defect (bug)  |      Status:  reviewing
 Priority:  normal        |   Milestone:  Future Release
Component:  HTTP API      |     Version:
 Severity:  normal        |  Resolution:
 Keywords:  needs-patch   |     Focuses:
--------------------------+-----------------------------

Comment (by rmccue):

 FWIW, cannot replicate this on OSX 10.10 or 10.11 using
 [https://gist.github.com/rmccue/64e6a89e900cbe33d7eb this script]. This is
 using `self-signed.badssl.com`, not a loopback connection, but
 [https://www.ssllabs.com/ssltest/analyze.html?d=self-signed.badssl.com per
 SSL Labs] doesn't have RC4 enabled either. Can you try this script and see
 if it replicates the issue for you please? :)

--
Ticket URL: <https://core.trac.wordpress.org/ticket/34794#comment:9>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list