[wp-trac] [WordPress Trac] #50748: Fatal error on Site Health screen: "Please don't turn CURLOPT_SSL_VERIFYHOST off"

[WordPress Trac]

#50748: Fatal error on Site Health screen: "Please don't turn
CURLOPT_SSL_VERIFYHOST off"
--------------------------+------------------------------
 Reporter:  lxjtian       |       Owner:  (none)
     Type:  defect (bug)  |      Status:  new
 Priority:  normal        |   Milestone:  Awaiting Review
Component:  Site Health   |     Version:  5.5
 Severity:  critical      |  Resolution:
 Keywords:  close         |     Focuses:
--------------------------+------------------------------
Changes (by Clorith):

 * keywords:  PHP74 => close


Comment:

 Hiya, and welcome to the WordPress trac!

 It looks like you've got some kind of security rules in place that do not
 allow applications to disable SSL verification on remote requests. There's
 not much we can do about this, unfortunately, although you could use the
 `https_local_ssl_verify` filter and return `true` on it (quickly done with
 `add_filter( 'https_local_ssl_verify', '__return_true' );`)

 You will find that the same code is used when doing a loopback check, and
 when editing plugin or theme files. The reason it disables ssl
 verification is that it is connecting to it self (the same site), which
 can in some cases cause ssl certs to incorrectly be read as invalid.

 as there's not much we can do about this, I'm going to suggest we close
 this ticket, but I'll leave it open for your input, as you may know more
 about the security rules you are using here.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/50748#comment:3>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform