[wp-trac] [WordPress Trac] #34924: Network upgrade fails on tls 1.2 only servers

WordPress Trac noreply at wordpress.org
Wed Mar 30 07:33:07 UTC 2016


#34924: Network upgrade fails on tls 1.2 only servers
--------------------------------+------------------------------
 Reporter:  mensmaximus         |       Owner:
     Type:  defect (bug)        |      Status:  new
 Priority:  normal              |   Milestone:  Awaiting Review
Component:  HTTP API            |     Version:  2.7
 Severity:  normal              |  Resolution:
 Keywords:  https dev-feedback  |     Focuses:  multisite
--------------------------------+------------------------------

Comment (by rmccue):

 Took a look into this with @dd32. For newer versions of cURL, the default
 setting is equivalent to setting to TLSv1, but older versions have the
 distinction and default to SSL 2/3 negotiation. This means that the
 default is broken for (what appears to be) cURL versions <7.33.0.

 CURL_SSLVERSION_TLSv1 also isn't available in PHP <5.5, but we can just
 set the setting to the integer value of the constant instead (`1`)

 For consistency, seems like the best course of action is to set
 `CURLOPT_SSLVERSION` to `1`. Don't think we need a version switch for this
 really.

--
Ticket URL: <https://core.trac.wordpress.org/ticket/34924#comment:15>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list