Re: Soap over SSL and
| From: | David Zülke | Date: | Fri, 10 Jul 2009 10:38:25 +0000 |
| Subject: | Re: Soap over SSL and | ||
| References: | 1 2 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-44896@lists.php.net to get a copy of this message | ||
On 07.07.2009, at 16:18, Brian A. Seklecki wrote:
Attachment: [application/pkcs7-signature] smime.p7s
On Tue, 2009-07-07 at 15:42 +0200, endrazine wrote:Nonsense. ext/soap has support for all of this through PHP's "https" stream which wraps the "ssl" stream. Please RT(F)M: http://php.net/manual/en/soapclient.soapclient.php http://php.net/manual/en/context.ssl.php In short: $c = new SoapClient( 'https://foo/bar.wsdl', array(It is lacking any type of authentication of the payment gateway, which is not acceptable.I agree+++. The problem is that PHP SOAP uses an internal "streams" library instead of libcurl; the former lacks, the later has, client/server PKI support.
'stream_context" => stream_context_create(array(
'ssl' => array(
'verify_peer' => true
)
))
)
);
There is the whole range of options related to certs, including for CA certs etc. SoapClient itself has an option for a 'local_cert' as well.
- David
Attachment: [application/pkcs7-signature] smime.p7s