note 120265 added to context.ssl
| From: | Charlie | Date: | Fri, 02 Dec 2016 19:28:16 +0000 |
| Subject: | note 120265 added to context.ssl | ||
| Groups: | php.notes | ||
| Request: | Send a blank email to php-notes+get-207960@lists.php.net to get a copy of this message | ||
It appears that "allow_self_signed" does not and cannot apply to the local_cert option.
The stunnel verify=4 option, which verifies but ignores a CA, has no analog in these settings, which
is unfortunate.
Even more perplexingly, while the "openssl verify -CAfile" is successful, PHP appears
unable to use the new ca/crt pair in any configuration.
I did actually link my PHP against a copy of LibreSSL 2.3.8, but PHP oddly is unable to use TLS1.1
or 1.2. It does, however, enable EC secp521r1 (of which my native OpenSSL 0.9.8e is incapable).
----
Server IP: 72.52.91.14
Probable Submitter: 142.79.57.1
----
Manual Page -- http://php.net/manual/en/context.ssl.php
Edit -- https://master.php.net/note/edit/120265
Del: integrated -- https://master.php.net/note/delete/120265/integrated
Del: useless -- https://master.php.net/note/delete/120265/useless
Del: bad code -- https://master.php.net/note/delete/120265/bad+code
Del: spam -- https://master.php.net/note/delete/120265/spam
Del: non-english -- https://master.php.net/note/delete/120265/non-english
Del: in docs -- https://master.php.net/note/delete/120265/in+docs
Del: other reasons-- https://master.php.net/note/delete/120265
Reject -- https://master.php.net/note/reject/120265
Search -- https://master.php.net/manage/user-notes.php