Add more INI options to control OpenSSL verification
Nobody has claimed this yet.
- Dominant language
- C
- Stars
- 40.4k
- Forks
- 8.1k
- Avg merge
- 2d 13h
- Merged PRs (30d)
- 96
Description
Description
Currently OpenSSL offers openssl.cafile and openssl.capath. In some cases it seems useful to control other verification like allow_self_signed.
This is related to the bug report https://bugs.php.net/bug.php?id=69319 which proposed stream_context_set_default but that's not possible due to BC impact and also does not make always sense from the logic point of view.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by tracing the existing openssl.cafile and openssl.capath INI options, then read the linked bug report about stream_context_set_default and its backward-compatibility concern. Define the additional verification controls and confirm that their behavior and compatibility implications are documented and testable.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- c, php
- Domain
- security
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100