[wp-trac] [WordPress Trac] #16606: WP_Http_Streams::test doesn't check enough to confirm if it can do HTTPS

[WordPress Trac]

#16606: WP_Http_Streams::test doesn't check enough to confirm if it can do HTTPS
---------------------------------+-----------------------------
 Reporter:  westi                |       Owner:
     Type:  defect (bug)         |      Status:  new
 Priority:  high                 |   Milestone:  Future Release
Component:  HTTP                 |     Version:  3.0.5
 Severity:  major                |  Resolution:
 Keywords:  3.2-early has-patch  |
---------------------------------+-----------------------------

Comment (by mdawaffe):

 {{{fsockopen()}}} can't verify SSL certificates so its {{{::test()}}}
 should reflect that.

 Streams can verify SSL certificates, though the code is currently broken
 (see [attachment:16606.8.diff 16606.8.diff]).  Unfortunately, setting
 {{{verify_peer}}} is useless unless {{{cafile}}} or {{{capath}}} is also
 set, and we can't know what to set those to (also {{{verify_host}}}
 doesn't exist).  So the streams {{{::test()}}} should also bail if
 {{{sslverify}}} is {{{true}}}.

 Only cURL and the HTTP extension can verify SSL certs.

-- 
Ticket URL: <http://core.trac.wordpress.org/ticket/16606#comment:11>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software