[wp-trac] [WordPress Trac] #18201: Verify updates with md5 checks

[WordPress Trac]

#18201: Verify updates with md5 checks
-----------------------------+------------------
 Reporter:  nacin            |       Owner:
     Type:  feature request  |      Status:  new
 Priority:  low              |   Milestone:  3.7
Component:  Upgrade/Install  |     Version:
 Severity:  normal           |  Resolution:
 Keywords:                   |
-----------------------------+------------------

Comment (by rmccue):

 Replying to [comment:8 nofearinc]:
 > 2. If PHP isn't compiled with OpenSSL support, then check for SSL
 support in system curl/wget calls. Perform system download/update with the
 root CA certificate bundled in WordPress. Then verify and install as
 described in 1.

 If you mean the cURL extension, then cURL only has SSL support if you also
 have OpenSSL (that is, cURL depends on OpenSSL for support) from memory.
 If you mean using command-line curl/wget, calling exec/shell_exec/... is a
 Bad Idea(tm) and it's better to avoid that.

 As far as I can see though, this ticket is more for integrity checking
 than security, security issues are being handled in #18577.

--
Ticket URL: <http://core.trac.wordpress.org/ticket/18201#comment:9>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software