[wp-trac] [WordPress Trac] #25007: WP_HTTP_Fsockopen does not verify SSL certificates

WordPress Trac noreply at wordpress.org
Tue Sep 3 12:48:27 UTC 2013

#25007: WP_HTTP_Fsockopen does not verify SSL certificates
 Reporter:  rmccue        |       Owner:
     Type:  defect (bug)  |      Status:  new
 Priority:  normal        |   Milestone:  3.7
Component:  HTTP          |     Version:
 Severity:  major         |  Resolution:
 Keywords:                |

Comment (by dd32):

 > Note that the above patch does not do common name checking

 Well pointed out, Added in attachment:25007.3.diff through
 WP_HTTP_Streams::verify_ssl_certficate(). The more you take out of PHP's
 hands, the more you can rely upon it it seems.

 It appears that that change means it now supports the same as Requests
 does. I've skipped IP support as I question if anyone else does that..
 (plus it's a bit too low-level for a PHP library to handle)

Ticket URL: <http://core.trac.wordpress.org/ticket/25007#comment:13>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software

More information about the wp-trac mailing list