[wp-trac] [WordPress Trac] #35637: SSL Certificate Problems not fixed with 4.4.1

WordPress Trac noreply at wordpress.org
Fri Jan 29 03:43:34 UTC 2016


#35637: SSL Certificate Problems not fixed with 4.4.1
-------------------------------+------------------------------
 Reporter:  jaroat             |       Owner:
     Type:  defect (bug)       |      Status:  new
 Priority:  normal             |   Milestone:  Awaiting Review
Component:  HTTP API           |     Version:  4.4.1
 Severity:  normal             |  Resolution:
 Keywords:  reporter-feedback  |     Focuses:
-------------------------------+------------------------------

Comment (by ctalkington):

 @dd32 some additional info for you.

 {{{
 Debian 8.3

 PHP 5.6.17-0+deb8u1 (cli) (built: Jan 13 2016 09:10:12)

 curl 7.38.0 (x86_64-pc-linux-gnu) libcurl/7.38.0 OpenSSL/1.0.1k zlib/1.2.8
 libidn/1.29 libssh2/1.4.3 librtmp/2.3
 Protocols: dict file ftp ftps gopher http https imap imaps ldap ldaps pop3
 pop3s rtmp rtsp scp sftp smtp smtps telnet tftp
 Features: AsynchDNS IDN IPv6 Largefile GSS-API SPNEGO NTLM NTLM_WB SSL
 libz TLS-SRP
 }}}

 I'm seeing SSL issues (mainly mailchimp api) after the latest batch of
 curl and openssl patches released through debian-security. Debian 7.9
 fully patched works fine.


 {{{
 curl 7.26.0 (i486-pc-linux-gnu) libcurl/7.26.0 OpenSSL/1.0.1e zlib/1.2.7
 libidn/1.25 libssh2/1.4.2 librtmp/2.3
 Protocols: dict file ftp ftps gopher http https imap imaps ldap pop3 pop3s
 rtmp rtsp scp sftp smtp smtps telnet tftp
 Features: Debug GSS-Negotiate IDN IPv6 Largefile NTLM NTLM_WB SSL libz
 TLS-SRP
 }}}


 WP version doesn't appear to impact it.

 cert seems fine from a glance but I'm guessing some security fix is
 causing this as I get the same error via CLI.
 https://us1.api.mailchimp.com/3.0/?apikey=test

 I don't think WP will be able to fix this particular issue but you might
 see additional reports as servers are patched.

--
Ticket URL: <https://core.trac.wordpress.org/ticket/35637#comment:6>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list