[wp-trac] [WordPress Trac] #25007: WP_HTTP_Fsockopen does not verify SSL certificates

[WordPress Trac]

#25007: WP_HTTP_Fsockopen does not verify SSL certificates
--------------------------+-----------------
 Reporter:  rmccue        |      Owner:
     Type:  defect (bug)  |     Status:  new
 Priority:  normal        |  Milestone:  3.7
Component:  HTTP          |    Version:
 Severity:  major         |   Keywords:
--------------------------+-----------------
 mdawaffe's talk at WCSF mentioned that fsockopen doesn't verify SSL
 certificates. The talk lead me to investigate
 [http://requests.ryanmccue.info/ Requests] and see if I could fix that.

 It turns out it is possible to do this with stream context options, but
 requires using [http://www.php.net/manual/en/function.stream-context-
 create.php stream_context_create] rather than fsockopen. (We can also
 allow passing in a custom certificate file this way, which neither the
 cURL nor fsockopen transports allow at the moment.)

 Example fix
 [https://github.com/rmccue/Requests/commit/1b4336698f34cbbc56066bf081166068776480a7
 has been committed to Requests], I can port over if you'd like.

--
Ticket URL: <http://core.trac.wordpress.org/ticket/25007>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software