Bug #80854 [NEW]: SAN Certificate Wildcard fails with verify_peer_name

From: ricardo dot branco at covermg dot com Operating system: Centos 7 PHP version: 7.4.16 Package: Sockets related Bug Type: Bug Bug description:SAN Certificate Wildcard fails with verify_peer_name Description: ------------ Since verify_peer_name/verify_peer is now default on it can not validate certificates with multiple SAN entries. ``` PHP Warning: stream_socket_enable_crypto(): Peer certificate CN=*.smtp.sendgrid.net' did not match expected CN=smtp.sendgrid.com' in /home/ips/library/Zend/Mail/Protocol/Smtp.php on line 206 ``` Currently only way to correct this id by disabling verify. This has been open for ages. https://bugs.php.net/bug.php?id=67666 -- Edit bug report at https://bugs.php.net/bug.php?id=80854&edit=1 -- Fix committed: https://bugs.php.net/fix.php?id=80854&r=fixed Fixed in release: https://bugs.php.net/fix.php?id=80854&r=alreadyfixed Need backtrace: https://bugs.php.net/fix.php?id=80854&r=needtrace Need Reproduce Script: https://bugs.php.net/fix.php?id=80854&r=needscript Try newer version: https://bugs.php.net/fix.php?id=80854&r=oldversion Not developer issue: https://bugs.php.net/fix.php?id=80854&r=support Expected behavior: https://bugs.php.net/fix.php?id=80854&r=notwrong Not enough info: https://bugs.php.net/fix.php?id=80854&r=notenoughinfo Submitted twice: https://bugs.php.net/fix.php?id=80854&r=submittedtwice register_globals: https://bugs.php.net/fix.php?id=80854&r=globals PHP version support discontinued: https://bugs.php.net/fix.php?id=80854&r=phptooold Daylight Savings: https://bugs.php.net/fix.php?id=80854&r=dst IIS Stability: https://bugs.php.net/fix.php?id=80854&r=isapi Install GNU Sed: https://bugs.php.net/fix.php?id=80854&r=gnused Floating point limitations: https://bugs.php.net/fix.php?id=80854&r=float No Zend Extensions: https://bugs.php.net/fix.php?id=80854&r=nozend MySQL Configuration Error: https://bugs.php.net/fix.php?id=80854&r=mysqlcfg