Bug #77762 [NEW]: CURLOPT_SSL_VERIFYHOST should mention subjectaltname

From: hanno at hboeck dot de Operating system: PHP version: Irrelevant Package: Documentation problem Bug Type: Bug Bug description:CURLOPT_SSL_VERIFYHOST should mention subjectaltname Description: ------------ Under http://php.net/curl_setopt the description of CURLOPT_SSL_VERIFYHOST reads " 1 to check the existence of a common name in the SSL peer certificate. 2 to check the existence of a common name and also verify that it matches the hostname provided. 0 to not check the names. In production environments the value of this option should be kept at 2 (default value). " The "common name" in a certificate is deprecated and the modern way of having hostnames in certificates is the subjectaltname. The correct description would therefore be that it checks for either the common name or the Subject Alternative Name. See also curl upstream docs: https://curl.haxx.se/libcurl/c/CURLOPT_SSL_VERIFYHOST.html -- Edit bug report at https://bugs.php.net/bug.php?id=77762&edit=1 -- Try a snapshot (PHP 5.4): https://bugs.php.net/fix.php?id=77762&r=trysnapshot54 Try a snapshot (PHP 5.5): https://bugs.php.net/fix.php?id=77762&r=trysnapshot55 Try a snapshot (trunk): https://bugs.php.net/fix.php?id=77762&r=trysnapshottrunk Fixed in SVN: https://bugs.php.net/fix.php?id=77762&r=fixed Fixed in release: https://bugs.php.net/fix.php?id=77762&r=alreadyfixed Need backtrace: https://bugs.php.net/fix.php?id=77762&r=needtrace Need Reproduce Script: https://bugs.php.net/fix.php?id=77762&r=needscript Try newer version: https://bugs.php.net/fix.php?id=77762&r=oldversion Not developer issue: https://bugs.php.net/fix.php?id=77762&r=support Expected behavior: https://bugs.php.net/fix.php?id=77762&r=notwrong Not enough info: https://bugs.php.net/fix.php?id=77762&r=notenoughinfo Submitted twice: https://bugs.php.net/fix.php?id=77762&r=submittedtwice register_globals: https://bugs.php.net/fix.php?id=77762&r=globals PHP 4 support discontinued: https://bugs.php.net/fix.php?id=77762&r=php4 Daylight Savings: https://bugs.php.net/fix.php?id=77762&r=dst IIS Stability: https://bugs.php.net/fix.php?id=77762&r=isapi Install GNU Sed: https://bugs.php.net/fix.php?id=77762&r=gnused Floating point limitations: https://bugs.php.net/fix.php?id=77762&r=float No Zend Extensions: https://bugs.php.net/fix.php?id=77762&r=nozend MySQL Configuration Error: https://bugs.php.net/fix.php?id=77762&r=mysqlcfg