SSL certificate bundles missing

Open dktapps opened this issue 6 years ago • 2 comments

This is problematic for functions which depend on features provided by openssl, such as https:// support in file_get_contents().

Apr 09 '19 12:04 dktapps

The following php.ini settings should address this for common operating systems:

openssl.cafile=/etc/ssl/cert.pem
openssl.capath=/etc/ssl/certs

I think it's best to rely on system SSL certificates rather than bundling our own, since that way they'll stay up to date with the system without needing to replace the PHP binary.

Jan 22 '23 20:01 dktapps

It turns out this is also problematic for curl on both Windows and *nix. We've just never noticed because PM sets CURLOPT_VERIFYPEER to false in Internet::getURL()...

Jun 06 '23 20:06 dktapps