From:
Operating system: Linux
PHP version: 5.4.3
Package: OpenSSL related
Bug Type: Bug
Bug description:Default CA certificates are not loaded
Description:
------------
OpenSSL CA default certificates are not loaded. To make HTTPS certificate
verification work, I have to hardcode the path to where CA certs are on the
local system, eg:
$req = new HTTP_Request2('https://url', HTTP_Request2::METHOD_GET,
array ("ssl_capath" => "/usr/lib/ssl/certs"));
This isn't portable, and it's very unobvious; it seems that some people
"work
around" this by disabling certificate verification, which is bad. I don't
know
if some distros patch around this problem, or if there's something else
going on
for this not to happen to everybody; I'm hitting it on Debian testing and
with
OpenSSL 1.0.1c.
In php_SSL_new_from_context, if cafile and capath are both NULL, it looks
like
you only need to call SSL_CTX_set_default_verify_paths instead of
SSL_CTX_load_verify_locations. Don't call it if either are specified, so
people
don't end up with certificates loaded when they explicitly want to load
only
specific ones.
--
Edit bug report at https://bugs.php.net/bug.php?id=62050&edit=1
--
Try a snapshot (PHP 5.4):
https://bugs.php.net/fix.php?id=62050&r=trysnapshot54
Try a snapshot (PHP 5.3):
https://bugs.php.net/fix.php?id=62050&r=trysnapshot53
Try a snapshot (trunk):
https://bugs.php.net/fix.php?id=62050&r=trysnapshottrunk
Fixed in SVN:
https://bugs.php.net/fix.php?id=62050&r=fixed
Fixed in SVN and need be documented:
https://bugs.php.net/fix.php?id=62050&r=needdocs
Fixed in release:
https://bugs.php.net/fix.php?id=62050&r=alreadyfixed
Need backtrace:
https://bugs.php.net/fix.php?id=62050&r=needtrace
Need Reproduce Script:
https://bugs.php.net/fix.php?id=62050&r=needscript
Try newer version:
https://bugs.php.net/fix.php?id=62050&r=oldversion
Not developer issue:
https://bugs.php.net/fix.php?id=62050&r=support
Expected behavior:
https://bugs.php.net/fix.php?id=62050&r=notwrong
Not enough info:
https://bugs.php.net/fix.php?id=62050&r=notenoughinfo
Submitted twice:
https://bugs.php.net/fix.php?id=62050&r=submittedtwice
register_globals:
https://bugs.php.net/fix.php?id=62050&r=globals
PHP 4 support discontinued:
https://bugs.php.net/fix.php?id=62050&r=php4
Daylight Savings: https://bugs.php.net/fix.php?id=62050&r=dst
IIS Stability:
https://bugs.php.net/fix.php?id=62050&r=isapi
Install GNU Sed:
https://bugs.php.net/fix.php?id=62050&r=gnused
Floating point limitations:
https://bugs.php.net/fix.php?id=62050&r=float
No Zend Extensions:
https://bugs.php.net/fix.php?id=62050&r=nozend
MySQL Configuration Error:
https://bugs.php.net/fix.php?id=62050&r=mysqlcfg
