[wp-trac] [WordPress Trac] #25007: WP_HTTP_Fsockopen does not verify SSL certificates

[WordPress Trac]

#25007: WP_HTTP_Fsockopen does not verify SSL certificates
------------------------------+------------------
 Reporter:  rmccue            |       Owner:
     Type:  defect (bug)      |      Status:  new
 Priority:  normal            |   Milestone:  3.7
Component:  HTTP              |     Version:
 Severity:  major             |  Resolution:
 Keywords:  needs-unit-tests  |
------------------------------+------------------

Comment (by rmccue):

 Replying to [comment:49 dd32]:
 > If you have to specify a custom certificate file (ie. one which contains
 a specific hosts certificate, not the one from curl/haxx.se) then there's
 a parameter you can pass to WP_HTTP to specify an alternative certificate
 file.

 Additionally, if you have to use cURL manually (please, please don't),
 then the included certificate file should be available at `ABSPATH . WPINC
 . '/certificates/ca-bundle.crt'`

 But again, please *please* don't do that, and use the WP HTTP API instead.

--
Ticket URL: <http://core.trac.wordpress.org/ticket/25007#comment:50>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software