Commits

Thomas Tornevall authored 1780fcbbdeaM
Merge pull request #3 in LIB/tornelib-php from feature/LIB-37-throwable-ini_set to master As this actually fixes a few bugs in the certificate checking, it has to be merged anyway. Examples: * openssl_guess is only looping through alternative bundles if there is a openssl_get_cert_locations() set, so if running 5.6.0 without this function (is it possible?) no alternatives will be picked. * Another fix is made at the primary UrlCall-handler which actually sets up a correct cert bundle if it has not been found yet * At the same place in the UrlCall-handler, to harden the requirement of a verified certificate, the function can be bypassed if not really setting the VERIFYHOST and VERIFYPEER to true, if the certificate verification is mandatory. This fix actually enforces curl to verify the peer when running curl_exec. * commit '9710c8dafb57abf2f67fc32a6ff43af0430499a4': LIB-57: Unit tests for the SSL hardening (Related to LIB-59) LIB-59: SSL hardening. - Ignores
Showing diff to9710c8dafb5