Comment 4 for bug 592442

Revision history for this message
Clint Byrum (clint-fewbar) wrote :

Hmm furthermore, I don't think this is a certificate verification problem, because the manual for the SSL wrapper (which https urls ride on top of) states that verify_peer defaults to false. If you run this code with 'strace -e trace=open,stat php xxxx.php' you can see that the ssl certs dir doesn't even get opened until the google request, suggesting that we never get a cert:

<?php
$ctx = stream_context_create(array('ssl'=>array('verify_peer'=>true, 'capath'=>'/etc/ssl/certs')));
print "now cas.ucdavis.edu...\n";
fopen("https://cas.ucdavis.edu/",'r',false,$ctx);
print "try ssl to google...\n";
fopen("https://www.google.com/",'r',false,$ctx);