Bug #69215 [Ver]: Cannot specify client CA list in SSL stream context

Edit report at https://bugs.php.net/bug.php?id=69215&edit=1 ID: 69215 Updated by: rdlowrey@php.net Reported by: fabien dot menager at gmail dot com Summary: Cannot specify client CA list in SSL stream context Status: Verified Type: Bug Package: OpenSSL related Operating System: All PHP Version: Irrelevant Assigned To: rdlowrey Block user comment: N Private report: N New Comment: This is corrected in the following commit to PHP-5.6 and master: http://git.php.net/?p=php-src.git;a=commit;h=3f6b12795c34c08d14c451d0e78896c39a3d92d1 There is not a new "ca_list" context option. Instead, simply pass the "cafile" context option as before and PHP will automatically pull the requisite names from this file (which you need to supply anyway so you can verify peer certs). The new commit window for the forthcoming 5.6.7 release has already passed so this change won't show up in distributed binaries until PHP 5.6.8 is released in a few weeks. In the meantime you can build against the current 5.6 branch or download a windows snapshot build from here: http://windows.php.net/downloads/snaps/php-5.6/ You'll need to wait a few hours until a new build with the latest changes is generated. Previous Comments: ------------------------------------------------------------------------ [2015-03-10 17:10:21] fabien dot menager at gmail dot com Description: ------------ SSL stream context does not provide the possibility to put client certificate authority list (via the SSL_CTX_set_client_CA_list() OpenSSL function) for a stream server. This bug report was originated in the SO question : http://stackoverflow.com/questions/28696886/how-to-set-trusted-certificate-authorities-list-to-socket-client-in-php Expected result: ---------------- Add a "ca_list" option in the SSL stream contexts. ------------------------------------------------------------------------ -- Edit this bug report at https://bugs.php.net/bug.php?id=69215&edit=1