Permalink
Browse files

Modified library to use secure cURL settings for SSL. Added ca-bundle…

….crt, generated by mk-ca-bundle.pl script from cURL.
  • Loading branch information...
1 parent cdf15c1 commit de4d8154f15f6b7c3f6fdaec2028f3e6505e888c @nealpoole nealpoole committed May 5, 2011
Showing with 3,990 additions and 2 deletions.
  1. +3 −2 EpiOAuth.php
  2. +3,987 −0 ca-bundle.crt
View
@@ -170,8 +170,9 @@ protected function curlInit($url)
curl_setopt($ch, CURLOPT_FOLLOWLOCATION, true);
if(isset($_SERVER ['SERVER_ADDR']) && !empty($_SERVER['SERVER_ADDR']) && $_SERVER['SERVER_ADDR'] != '127.0.0.1')
curl_setopt($ch, CURLOPT_INTERFACE, $_SERVER ['SERVER_ADDR']);
- curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
- curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 0);
+ curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, true);
+ curl_setopt($ch, CURLOPT_CAINFO, dirname(__FILE__) . DIRECTORY_SEPARATOR . 'ca-bundle.crt');
+ curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 2);
return $ch;
}
Oops, something went wrong.

0 comments on commit de4d815

Please sign in to comment.