[wp-trac] [WordPress Trac] #16904: CURLOPT_SSL_VERIFYHOST Should use 2 instead of true

WordPress Trac wp-trac at lists.automattic.com
Sun Mar 20 19:22:08 UTC 2011


#16904: CURLOPT_SSL_VERIFYHOST Should use 2 instead of true
--------------------------+---------------------------------
 Reporter:  sivel         |      Owner:
     Type:  defect (bug)  |     Status:  new
 Priority:  normal        |  Milestone:  Future Release
Component:  HTTP          |    Version:  3.1
 Severity:  normal        |   Keywords:  has-patch 3.2-early
--------------------------+---------------------------------
 CURLOPT_SSL_VERIFYHOST Should use an integer of 2 instead of true to
 enforce proper SSL verification.  Setting to true acts like 1, which only
 checks for the existence of a common name, and not that the common name
 matches the requested hostname.

 This was reported in another ticket #16855

-- 
Ticket URL: <http://core.trac.wordpress.org/ticket/16904>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list