[wp-trac] [WordPress Trac] #25007: WP_HTTP_Fsockopen does not verify SSL certificates

[WordPress Trac]

#25007: WP_HTTP_Fsockopen does not verify SSL certificates
------------------------------+------------------
 Reporter:  rmccue            |       Owner:
     Type:  defect (bug)      |      Status:  new
 Priority:  normal            |   Milestone:  3.7
Component:  HTTP              |     Version:
 Severity:  major             |  Resolution:
 Keywords:  needs-unit-tests  |
------------------------------+------------------

Comment (by dd32):

 > Are we going to be able to update this quickly enough when it changes?

 Answer is potentially yes, no, maybe.
 The certificate will only be able to be updated as fast as core updates,
 in the event that a CA included on the list is compromised, core would
 have to be updated to reflect that.

 We'll have to ensure that the file is re-built for each release (or at
 least checked), and we may also want to consider allowing it to be updated
 in a faster manner than with the core build (say through Auto-Updates)

--
Ticket URL: <http://core.trac.wordpress.org/ticket/25007#comment:23>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software