Re: Re: Improved TLS Defaults
| From: | Daniel Lowrey | Date: | Mon, 03 Feb 2014 20:09:16 +0000 |
| Subject: | Re: Re: Improved TLS Defaults | ||
| References: | 1 2 3 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-72113@lists.php.net to get a copy of this message | ||
I forgot to mention it, but I've also added another function to the
Improved TLS Defaults RFC:
openssl_get_cert_locations()
This should make it easier to debug CA file issues by coalescing all the
locations where PHP might look for a CA cert in one place. The new function
allows easier debugging as well as tooling to check if existing php.ini
settings or OS-assigned defaults can locate CA files are appropriate to
allow secure peer verification.
The update can be seen here:
https://wiki.php.net/rfc/improved-tls-defaults#expose_default_cert_paths