diff options
| author | Jakub Zelenka <bukka@php.net> | 2017-03-17 19:07:32 +0000 |
|---|---|---|
| committer | Jakub Zelenka <bukka@php.net> | 2017-03-17 19:07:32 +0000 |
| commit | df135ffa7ab30e13fb1e4b6ece7326defaf7753c (patch) | |
| tree | d7ed3f7b84a12e2324ab0f746ff77c00cdd9ec98 | |
| parent | 53e2c9158d4c758e1d0abbc4c1547aee48b31552 (diff) | |
| download | php-git-df135ffa7ab30e13fb1e4b6ece7326defaf7753c.tar.gz | |
Make test 002 for bug #65538 not to use https in cafile
| -rw-r--r-- | ext/openssl/tests/bug65538_002.phpt | 9 |
1 files changed, 8 insertions, 1 deletions
diff --git a/ext/openssl/tests/bug65538_002.phpt b/ext/openssl/tests/bug65538_002.phpt index 1066e01e54..21a23a2678 100644 --- a/ext/openssl/tests/bug65538_002.phpt +++ b/ext/openssl/tests/bug65538_002.phpt @@ -4,12 +4,19 @@ Bug #65538: SSL context "cafile" disallows URL stream wrappers <?php if (!extension_loaded('openssl')) die('skip, openssl required'); if (getenv("SKIP_ONLINE_TESTS")) die("skip online test"); +?> --FILE-- <?php $clientCtx = stream_context_create(['ssl' => [ - 'cafile' => 'http://curl.haxx.se/ca/cacert.pem' + // We don't get any ca list from php.net but it does not matter as we + // care about the fact that the external stream is not allowed. + // We can't use http://curl.haxx.se/ca/cacert.pem for this test + // as it is redirected to https which means the test would depend + // on system cafile when opening stream. + 'cafile' => 'http://www.php.net', ]]); file_get_contents('https://github.com', false, $clientCtx); +?> --EXPECTF-- Warning: remote cafile streams are disabled for security purposes in %s on line %d |