fix: don't verify peer name on self signed certs; don't verify self signed peer if cert is missing

pull/2670/head
Milan Pikula 2017-11-22 16:19:41 +01:00
parent 325ca46871
commit 22fbe12762
1 changed files with 6 additions and 1 deletions

View File

@ -8,7 +8,12 @@ class SyncTool {
if (!empty($server)) {
if ($server['Server']['cert_file']) $params['ssl_cafile'] = APP . "files" . DS . "certs" . DS . $server['Server']['id'] . '.pem';
if ($server['Server']['client_cert_file']) $params['ssl_local_cert'] = APP . "files" . DS . "certs" . DS . $server['Server']['id'] . '_client.pem';
if ($server['Server']['self_signed']) $params['ssl_allow_self_signed'] = $server['Server']['self_signed'];
if ($server['Server']['self_signed']) {
$params['ssl_allow_self_signed'] = true;
$params['ssl_verify_peer_name'] = false;
if (!isset($server['Server']['cert_file']))
$params['ssl_verify_peer'] = false;
}
}
$HttpSocket = new HttpSocket($params);