note 123325 added to context.ssl
| From: | mechtecs at gmail dot com | Date: | Fri, 09 Nov 2018 13:09:05 +0000 |
| Subject: | note 123325 added to context.ssl | ||
| Groups: | php.notes | ||
| Request: | Send a blank email to php-notes+get-209656@lists.php.net to get a copy of this message | ||
If you want to validate the server against a local certificate, which you already saved, to further
validate the target server, you have to use a fullchain.pem. Then the verify_peer option will work.
So just get the server certificate, and search the root CA's pem's and copy everything
into a single file. For example:
My certificate has the "GeoTrust TLS RSA CA G1" certificate in the chain, so you google
that string. Go to the official digicert Geotrust page and download the
"GeoTrustTLSRSACAG1.crt" certificate. Then you can use the following command to convert it
into the pem format:
openssl x509 -inform DER -in GeoTrustTLSRSACAG1.crt -out GeoTrustTLSRSACAG1.crt.pem -outform PEM
----
Server IP: 213.172.110.13
Probable Submitter: 5.10.186.18
----
Manual Page -- http://php.net/manual/en/context.ssl.php
Edit -- https://master.php.net/note/edit/123325
Del: integrated -- https://master.php.net/note/delete/123325/integrated
Del: useless -- https://master.php.net/note/delete/123325/useless
Del: bad code -- https://master.php.net/note/delete/123325/bad+code
Del: spam -- https://master.php.net/note/delete/123325/spam
Del: non-english -- https://master.php.net/note/delete/123325/non-english
Del: in docs -- https://master.php.net/note/delete/123325/in+docs
Del: other reasons-- https://master.php.net/note/delete/123325
Reject -- https://master.php.net/note/reject/123325
Search -- https://master.php.net/manage/user-notes.php