[wp-trac] Re: [WordPress Trac] #8702: HTTP API Updates

WordPress Trac wp-trac at lists.automattic.com
Wed Jan 28 18:28:27 GMT 2009


#8702: HTTP API Updates
-------------------------------------+--------------------------------------
 Reporter:  sivel                    |        Owner:  westi   
     Type:  enhancement              |       Status:  assigned
 Priority:  normal                   |    Milestone:  2.8     
Component:  HTTP                     |      Version:  2.7     
 Severity:  normal                   |   Resolution:          
 Keywords:  has-patch needs-testing  |  
-------------------------------------+--------------------------------------
Comment (by sivel):

 Streams does not allow for ssl validation if not using
 stream_socket_client to make the connection as far as I have been able to
 determine.  Currently Streams is using fopen which, even when passed
 verify_peer and verify_host options via stream_context_create, ignores ssl
 validity.

 This patch blacklists streams from making ssl connections.

 At this point, if we do not rewrite streams to use stream_socket_client,
 the only transports capable of handling https are curl and the http
 extension.

-- 
Ticket URL: <http://trac.wordpress.org/ticket/8702#comment:15>
WordPress Trac <http://trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list