[wp-trac] [WordPress Trac] #34794: CURLOPT_SSL_VERIFYHOST should be set to 2 or not be set at all

WordPress Trac noreply at wordpress.org
Wed Oct 5 05:18:35 UTC 2016


#34794: CURLOPT_SSL_VERIFYHOST should be set to 2 or not be set at all
--------------------------+--------------------------
 Reporter:  FriendlyGreg  |       Owner:  johnbillion
     Type:  defect (bug)  |      Status:  closed
 Priority:  normal        |   Milestone:
Component:  HTTP API      |     Version:
 Severity:  normal        |  Resolution:  invalid
 Keywords:  needs-patch   |     Focuses:
--------------------------+--------------------------
Changes (by dd32):

 * status:  reviewing => closed
 * resolution:   => invalid
 * milestone:  Future Release =>


Comment:

 Due to the switch to [https://github.com/rmccue/requests Requests], I
 suspect this is no longer an issue as it only sets
 `CURLOPT_SSL_VERIFYHOST` to `0` specifically when disabling verification.

 Any bugs deeper than that are unfortunately out of our control. The
 upstream [https://github.com/curl/curl/issues/547 cURL issue] was closed
 as palming it off to Apple, but AFAIK no-one has reported it there yet. I
 have no way of knowing if it's fixed in recent OSX's either.

 Either way, I'm marking this as invalid, if it's still an issue it needs
 to be chased up with cURL on the above ticket or reproduced under Requests
 and a bug filed there.

--
Ticket URL: <https://core.trac.wordpress.org/ticket/34794#comment:14>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list