[wp-trac] [WordPress Trac] #25007: WP_HTTP_Fsockopen does not verify SSL certificates

[WordPress Trac]

#25007: WP_HTTP_Fsockopen does not verify SSL certificates
--------------------------+------------------
 Reporter:  rmccue        |       Owner:
     Type:  defect (bug)  |      Status:  new
 Priority:  normal        |   Milestone:  3.7
Component:  HTTP          |     Version:
 Severity:  major         |  Resolution:
 Keywords:                |
--------------------------+------------------

Comment (by dd32):

 > Note that the above patch does not do common name checking

 Well pointed out, Added in attachment:25007.3.diff through
 WP_HTTP_Streams::verify_ssl_certficate(). The more you take out of PHP's
 hands, the more you can rely upon it it seems.

 It appears that that change means it now supports the same as Requests
 does. I've skipped IP support as I question if anyone else does that..
 (plus it's a bit too low-level for a PHP library to handle)

--
Ticket URL: <http://core.trac.wordpress.org/ticket/25007#comment:13>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software