--TEST--
Bug #65538: SSL context "cafile" disallows URL stream wrappers
--SKIPIF--
<?php
if (!extension_loaded('openssl')) die('skip, openssl required');
if (getenv("SKIP_ONLINE_TESTS")) die("skip online test");
?>
--FILE--
<?php
$clientCtx = stream_context_create(['ssl' => [
    // We don't get any ca list from php.net but it does not matter as we
    // care about the fact that the external stream is not allowed.
    // We can't use http://curl.haxx.se/ca/cacert.pem for this test
    // as it is redirected to https which means the test would depend
    // on system cafile when opening stream.
    'cafile' => 'http://www.nginx.org',
]]);
file_get_contents('https://github.com', false, $clientCtx);
?>
--EXPECTF--
Warning: remote cafile streams are disabled for security purposes in %s on line %d

Warning: file_get_contents(): Failed to enable crypto in %s on line %d

Warning: file_get_contents(%s): Failed to open stream: operation failed in %s on line %d