Re: PHP and SSL question
| From: | Jeff | Date: | Thu, 28 Sep 2000 05:26:06 +0000 |
| Subject: | Re: PHP and SSL question | ||
| References: | 1 2 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-17865@lists.php.net to get a copy of this message | ||
Matt, (and all others who can help)
Thanks for your quick reply. I read over your tutorial and also
checked out the cURL site and the PHP4 docs. I still have a bunch
of confused questions.
First, we have gone through the effort of building Apache
with mod-ssl, and we're in the process of getting a cert from
Thawte. Has this effort been wasted? It looks like cURL works
independently of mod-ssl and Apache unless I have misunderstood.
Second, if you use the exec command as in the tutorial, is this
a security problem? It seems that anyone hitting ps should be able
to see your full command line. Conversely, when PHP4 runs the
curl_exec() function, does this also execute an external program
or a linked function?
Third, Is there a way to get the PHP4 curl functions to return
the results to the script, as your tutorial does? All the docs
seem to indicate that these functions want to send and receive
files, which will create additional overhead to create the output
file, parse the result file then delete both files, etc.
Fourth, does the curl_exec() function wait for the remote server
to finish processing the request, store the result and return a
result code prior to continuing the php script? What are the
possible result codes?
This cURL function is very new so I guess not many people have
played with it yet, but I'd appreciate any further input.
Again, thanks for pointing me in the right direction so far. It
would be a lot easier if php could use mod-ssl. If mod-ssl is
installed and if you specify port 443 then fsockopen should use
mod-ssl to talk to the remote system. I'm sure I'm oversimplifying
this, but is there any chance of getting php to do this?
Jeff
Matt Allen wrote:
>
> Hi Jeff,
>
> Check out this link:
>
> http://www.phpbuilder.com/columns/matt20000305.php3
>
> You cant use fsockopen() to talk SSL, you need an external app OR use PHP4's new
> cURL compatability.
>
> Matta
>
> Jeff wrote:
> >
> > My ISP has set up mod_ssl on my server and I need to do
> > some PHP scripting with it.
> >
> > If I use fsockopen to open a connection to the remote
> > server and transmit and receive data with it, does the
> > data get encryped and decrypted, or does this bypass
> > the security layer?
> >
> > Anyone have any other resources I can check out for doing
> > SSL with PHP and Apache?
> >
> > TIA
> > Jeff Wolkove
> >
> > PS - is the news server down? I can't connect to news.php.net
> >
> > --
> > PHP General Mailing List (http://www.php.net/)
> > To unsubscribe, e-mail: php-general-unsubscribe@lists.php.net
> > For additional commands, e-mail: php-general-help@lists.php.net
> > To contact the list administrators, e-mail: php-list-admin@lists.php.net
>
> --
> Matt Allen Linux/PHP eCommerce Solutions
> Linux Worx Linux Networking
> www.linuxworx.com.au Consulting
> matt@linuxworx.com.au
> 0413 777 771