#22379 [Com]: bug introduced going from PHP 4.3.x to 4.3.1+

ID: 22379 Comment by: bharris at spro dot net Reported By: jason at hdev dot net Status: Bogus Bug Type: cURL related Operating System: Windows 2000 PHP Version: 4.3.1 Assigned To: edink New Comment: For Win2000: To get the 4.3.1 curl dll to work with https you now need to download the latest win32 curl library from http://curl.haxx.se and snag the ca-bundle.crt file from the lib directory. Then in your PHP script, add the following setopt line to the rest of your curl_setopt commands: curl_setopt($ch, CURLOPT_CAFILE, 'C:\Inetpub\ca-bundle.crt') This worked for me and allowed me to discontinue using the CURLOPT_SSL_VERIFYPEER set to zero hack. Previous Comments: ------------------------------------------------------------------------ [2003-02-25 05:00:43] jason at hdev dot net The line curl_easy_setopt($ch, CURLOPT_SSL_VERIFYPEER, FALSE); does not work with the script with php 4.3.0 It just runs the script and doesn't do anything about the secure web page! ------------------------------------------------------------------------ [2003-02-25 04:49:41] jason at hdev dot net It still doesn't work when I tried with curl_easy_setopt(curl, CURLOPT_SSL_VERIFYPEER, FALSE); ------------------------------------------------------------------------ [2003-02-25 04:46:22] jason at hdev dot net Differences between 4.3.0 php_curl.dll and 4.3.1 is 4.3.0 is 176KB and 4.3.1 is 120KB. Also, it doesn't work with the php_gd2.dll from 4.3.1, I have to use the php_gd2.dll from 4.3.0, so the problem is probably related to both php_gd2.dll and php_curl.dll, as my script only works when I use the previous versions of both of these files. The DLLs which I install on Win2k are expat.dll, libeay32.dll, libmhash.dll, sablot.dll, and ssleay32.dll, all from the 4.3.1 release. (overwriting the old DLLs from the previous php) Here is the code snippet if you want to test: $URL=""; $ch = curl_init(); curl_setopt($ch, CURLOPT_URL,"https://$URL"); curl_setopt($ch, CURLOPT_POST, 1); curl_setopt($ch, CURLOPT_POSTFIELDS, ""); curl_exec($ch); curl_close($ch); ------------------------------------------------------------------------ [2003-02-25 02:09:48] sniper@php.net Not bug -> bogus. ------------------------------------------------------------------------ [2003-02-25 02:04:11] daniel at haxx dot se This doesn't look like a bug but the expected behavior with libcurl 7.10 or later. As can be read with somewhat more details here: http://curl.haxx.se/lxr/source/SSLCERTS ------------------------------------------------------------------------ The remainder of the comments for this report are too long. To view the rest of the comments, please view the bug report online at http://bugs.php.net/22379 -- Edit this bug report at http://bugs.php.net/?id=22379&edit=1