Hacker News Reader

DaveRandomon SSL and PHP Streams, Part 1

Not before 5.6 (where CN_match is actually deprecated in favour of peer_name)

DaveRandomon SSL and PHP Streams, Part 1

cURL has it's problems - one of them being a different kind of hateful API, another being the fact that you still need to actually configure it properly, which means you have to be approximately competent.

A major element of the 5.6 changes (documented in an article not yet written, but should be by early next week) is to protect Jimmy the junior dev from himself - chances are that an inexperienced dev, given the choice between a one-liner and several lines with a bunch of scary-looking options, is going to pick the former. I'm not advocating it, just stating it.

DaveRandomon SSL and PHP Streams, Part 1

I did quite clearly state, this information applies to PHP versions before 5.6 (which means that in practice, people need to be doing this for at least the next two years until 5.6 is widely adopted)...

The next article will cover the changes in 5.6 and why you don't need to set those ctx opts any more (and a few more you might want to set instead)