[wp-trac] [WordPress Trac] #34883: Support TLS Client Certificates

WordPress Trac noreply at wordpress.org
Sun Dec 6 21:04:04 UTC 2015


#34883: Support TLS Client Certificates
-----------------------------+-----------------------------
 Reporter:  Outlandish Josh  |      Owner:
     Type:  enhancement      |     Status:  new
 Priority:  normal           |  Milestone:  Awaiting Review
Component:  HTTP API         |    Version:  trunk
 Severity:  normal           |   Keywords:
  Focuses:                   |
-----------------------------+-----------------------------
 As we get savvier about TLS as part of the HTTPS Everywhere movement, one
 use-case that would be nice to support is using Client Certificates when
 making HTTPS requests. Using client certificates for authentication is a
 strong way to build trusted APIs.

 This looks like it would be fairly straightforward to implement as the
 option is supported by both Curl and PHP stream contexts
 ({{{CURLOPT_SSLCERT}}} or {{{local_cert}}}, respectively). We'd just need
 to add the handling for specifying the path to a client cert as part of
 the $options array in the API calls, and turn that in the proper option
 for the actual transporter.

 I should be able to create a patch for this shortly.

--
Ticket URL: <https://core.trac.wordpress.org/ticket/34883>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list