Req #71003 [Opn]: Expose MYSQLI_CLIENT_SSL_DONT_VERIFY_SERVER_CERT to PDO interface

From: Date: Wed, 18 May 2016 17:52:52 +0000
Subject: Req #71003 [Opn]: Expose MYSQLI_CLIENT_SSL_DONT_VERIFY_SERVER_CERT to PDO interface
References: 1  Groups: php.bugs 
Request: Send a blank email to php-bugs+get-201184@lists.php.net to get a copy of this message 
Edit report at https://bugs.php.net/bug.php?id=71003&edit=1

 ID:                 71003
 Updated by:         nikic@php.net
 Reported by:        tmatsuo at google dot com
 Summary:            Expose MYSQLI_CLIENT_SSL_DONT_VERIFY_SERVER_CERT to
                     PDO interface
 Status:             Open
 Type:               Feature/Change Request
 Package:            PDO MySQL
 PHP Version:        5.6.16
-Assigned To:        
+Assigned To:        andrey
 Block user comment: N
 Private report:     N

 New Comment:

@andrey: You implemented the mysqli fix for this issue, could you maybe take a look at PDO mysql as
well?


Previous Comments:
------------------------------------------------------------------------
[2016-05-18 16:55:31] highmind63 at gmail dot com

For all those trying to get this to work, don't. There is no possible way to make this work, in
all of my tests. You MUST have a valid commercial certificate and it MUST match the name of the
host. I've tried the following to no avail:

set PDO::MYSQL_ATTR_SSL_CAPATH option to a properly hashed dir (one that I tested and works with
CURLOPT_CAPATH). No go

set openssl.capath to the same properly hashed dir. No go, completely ignored.

I tried fiddling around a bit with openssl's internal cert store, but I couldn't get that
to work. That should work, but at the expense of changing all the openssl cert store data
system-wide.

This is a big defect in PHP's PDO currently, PDO over SSL is barely useable as-is.

------------------------------------------------------------------------
[2016-05-18 02:05:16] requinix@php.net

See also bug #71845 about the general CN mismatch problem.

------------------------------------------------------------------------
[2016-05-18 02:04:09] requinix@php.net

Related To: Bug #71845

------------------------------------------------------------------------
[2016-05-18 02:02:50] requinix@php.net

Related To: Bug #72235

------------------------------------------------------------------------
[2016-05-15 20:28:57] zhil dot mobile at gmail dot com

Any news regarding this bug?

------------------------------------------------------------------------


The remainder of the comments for this report are too long. To view
the rest of the comments, please view the bug report online at

    https://bugs.php.net/bug.php?id=71003


--
Edit this bug report at https://bugs.php.net/bug.php?id=71003&edit=1

Thread (18 messages)

« previous php.bugs (#201184) next »