Modified library to use secure cURL settings for SSL. Added ca-bundle…

….crt, generated by mk-ca-bundle.pl script from cURL.
louisremi · May 5, 2011 · de4d815 · de4d815
1 parent cdf15c1
commit de4d815
Show file tree

Hide file tree

Showing 2 changed files with 3,990 additions and 2 deletions.
diff --git a/EpiOAuth.php b/EpiOAuth.php
@@ -170,8 +170,9 @@ protected function curlInit($url)
       curl_setopt($ch, CURLOPT_FOLLOWLOCATION, true);
     if(isset($_SERVER ['SERVER_ADDR']) && !empty($_SERVER['SERVER_ADDR']) && $_SERVER['SERVER_ADDR'] != '127.0.0.1')
       curl_setopt($ch, CURLOPT_INTERFACE, $_SERVER ['SERVER_ADDR']);
-    curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
-    curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 0);
+    curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, true);
+    curl_setopt($ch, CURLOPT_CAINFO, dirname(__FILE__) . DIRECTORY_SEPARATOR . 'ca-bundle.crt');
+    curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 2);
     return $ch;
   }