bug #77 Use composer/ca-bundle for certificates checks (tucksaun)

This PR was merged into the 4.0-dev branch.

Discussion
----------

Use composer/ca-bundle for certificates checks

Should fix #75

Commits
-------

204c3ba Use composer/ca-bundle for certificates checks

SensioLabs/Security/Crawler/CurlCrawler.php

@@ -11,6 +11,7 @@
 
 namespace SensioLabs\Security\Crawler;
 
+use Composer\CaBundle\CaBundle;
 use SensioLabs\Security\Exception\RuntimeException;
 use SensioLabs\Security\SecurityChecker;
 
@@ -49,6 +50,7 @@ protected function doCheck($lock, $certFile)
         curl_setopt($curl, CURLOPT_FAILONERROR, false);
         curl_setopt($curl, CURLOPT_SSL_VERIFYPEER, 1);
         curl_setopt($curl, CURLOPT_SSL_VERIFYHOST, 2);
+        curl_setopt($curl, CURLOPT_CAINFO, CaBundle::getSystemCaRootBundlePath());
         curl_setopt($curl, CURLOPT_USERAGENT, sprintf('SecurityChecker-CLI/%s CURL PHP', SecurityChecker::VERSION));
 
         $response = curl_exec($curl);

SensioLabs/Security/Crawler/FileGetContentsCrawler.php

@@ -11,6 +11,7 @@
 
 namespace SensioLabs\Security\Crawler;
 
+use Composer\CaBundle\CaBundle;
 use SensioLabs\Security\Exception\RuntimeException;
 use SensioLabs\Security\SecurityChecker;
 
@@ -37,6 +38,7 @@ protected function doCheck($lock, $certFile)
                 'user_agent' => sprintf('SecurityChecker-CLI/%s FGC PHP', SecurityChecker::VERSION),
             ),
             'ssl' => array(
+                'cafile' => CaBundle::getSystemCaRootBundlePath(),
                 'verify_peer' => 1,
                 'verify_host' => 2,
             ),

composer.json

@@ -9,7 +9,8 @@
         }
     ],
     "require": {
-        "symfony/console": "~2.7|~3.0"
+        "symfony/console": "~2.7|~3.0",
+        "composer/ca-bundle": "^1.0"
     },
     "bin": ["security-checker"],
     "autoload": {