Req #81528 [Opn]: Support multiple peer_fingerprint values per algorithm

From: Date: Sat, 16 Oct 2021 01:10:10 +0000
Subject: Req #81528 [Opn]: Support multiple peer_fingerprint values per algorithm
References: 1  Groups: php.bugs 
Request: Send a blank email to php-bugs+get-237230@lists.php.net to get a copy of this message 
Edit report at https://bugs.php.net/bug.php?id=81528&edit=1

 ID:                 81528
 Updated by:         requinix@php.net
 Reported by:        david at mandelberg dot org
 Summary:            Support multiple peer_fingerprint values per
                     algorithm
 Status:             Open
 Type:               Feature/Change Request
 Package:            OpenSSL related
 PHP Version:        master-Git-2021-10-16 (Git)
 Block user comment: N
 Private report:     N

 New Comment:

Or easier, change the array form to support non-string keys (or ignore keys entirely) and instead
deduce algorithm by the length - like it already does for the string form.


Previous Comments:
------------------------------------------------------------------------
[2021-10-16 00:54:58] david at mandelberg dot org

Description:
------------
Would it be possible to extend peer_fingerprint from https://www.php.net/manual/en/context.ssl.php
to support an array of multiple fingerprints per algorithm, instead of just one? I don't
currently see a way to configure secure certificate verification for a redundant service (where each
server has its own certificate) without using a CA.



------------------------------------------------------------------------



--
Edit this bug report at https://bugs.php.net/bug.php?id=81528&edit=1

Thread (4 messages)

« previous php.bugs (#237230) next »