cURL PHP Proper SSL between private servers with self-signed certificate -


i had connection between 2 servers running curlopt_ssl_verifypeer set "false" no common name in ssl cert avoid errors. following client code connected server certificate:

curl_setopt($ch,curlopt_ssl_verifypeer,false); curl_setopt($ch,curlopt_ssl_verifyhost,2);

however, changed code (set true) , specified computers certificate in pem format.

curl_setopt($ch,curlopt_ssl_verifypeer,true); curl_setopt($ch,curlopt_ssl_verifyhost,2); curl_setopt($ch,curlopt_cainfo,getcwd().'/includes/hostcert/hostname.crt');

this worked great on local network test machine, certificate signed it's hostname cn. how can setup php code trusts hostname computer , maintains secure connection.

i'm aware can set curlopt_ssl_verifyhost "0" or "1" , curlopt_ssl_verifypeer "false", these not valid solutions break ssl security.

my /etc/hosts file follows:

#<ip-address>   <hostname.domain.org>   <hostname> 127.0.0.1       localhost.localdomain   localhost examplehostname ::1             localhost.localdomain   localhost

you need generate certificate valid host name, as requested client. if you've used machine.local internal name, want use external clients calling via machine.example.org, need certificate use valid machine.example.org.

if need both (since same machine may called different host names), use subject alternative name extension , put multiple dns entries in certificate.


Comments

Post a Comment

Popular posts from this blog

jquery - Invalid Assignment Left-Hand Side -

i trying assign class tag via jquery, resulting in error through firebug says "invalid assignment left-hand side" on fourth line below. <cfoutput> $('.pngfix a').each(function(index) { var hreflink = $(this).attr("href"); if (hreflink.tolowercase() = '../audio.cfm') { $(this).addclass('audioimg'); } }); </cfoutput> looking around online, looks syntax problem, don't seem see it... any tips? thanks if (hreflink.tolowercase() = '../audio.cfm') that attempts assign value, rather check equality. change = operator == .
Read more

java - Play! framework 2.0: How to display multiple image? -

i need display gallery of photos. here template: @(photos: list[photo]) @title = { <bold>gallery</bold> } @main(title,"photo"){ <ul class="thumbnails"> @for(photo <- photos) { <li class="span3"> <a href="#" class="thumbnail"> <img src="@photo.path" alt=""> </a> </li> } </ul> } and here controller method: public static result getphotos() { return ok(views.html.photo.gallery.render(photo.get())); } and here photo bean : @entity public class photo extends model { @id public long id; @required public string label; public string path; public photo(string path, string label) { this.path = path; this.label = label; } private static finder<long, photo> find = new finder<long, photo>( long.class, photo.class); public static list<phot...
Read more

gmail - Is there any documentation for read-only access to the Google Contacts API? -

i want read-only access user's google contacts. there stackoverflow member wanted this, , received following answer : yes, there is, use https://www.googleapis.com/auth/contacts.readonly scope , "view contacts". this exchange reference read-only access google contacts can find using google. simply using access token obtained attempt read usual google contacts api (i.e. https://www.google.com/m8/feeds ) fails insufficient permissions. similarly, using google contacts api on new target fails 404 errors (for example https://www.googleapis.com/auth/contacts.readonly/default/full ). is there documentation anywhere on how use api, or permissible way access google contacts api full read-write access?
Read more