On Mon, Mar 24, 2003 at 11:15:05PM -0500, Kalin Mintchev wrote: > > hi all, > > i have problems getting fopen() and fsockopen() to work over https.. > > here is the problem.. > > from the phpinfo: > > OpenSSL support enabled > OpenSSL Version OpenSSL 0.9.6h 5 Dec 2002
OpenSSL 0.9.6h has a security vulnerability. PLEASe check http://www.openssl.org > > from php -m > > # php -m > [PHP Modules] > ctype > mysql > openssl > overload > pcre > posix > session > standard > tokenizer > xml > > [Zend Modules] > > > from the Appendix I regarding fopen() on php.net: > > Note: HTTPS is supported starting from PHP 4.3, if you have compiled in > support for OpenSSL. > > and from the documentation on fsockopen() on php.net: > As of PHP 4.3.0, if you have compiled in OpenSSL support, you may prefix > the hostname with either 'ssl://' or 'tls://' to use an SSL or TLS client > connection over TCP/IP to connect to the remote host. > > in a test file i have two lines of code like this: > > $file = "https://someurl.com";; > if (!($fp = fopen($file, "r"))) > > this produces an error but it doesn't point to any problem - like this: > Warning: fopen(https://someurl.com.......... in /path/to/file.php on line > 45 > > if i change $file to "http://someurl.com"; it works fine... > > with fsockopen() the situation is kinda the same. code: > $fp=fsockopen("ssl://www.foo.com", 443); > > error: > Warning: fsockopen() [function.fsockopen]: no SSL support in this build in > /path/to/file/... > > if i pul out the ssl:// part it works fine... > > now, i did read the posts on this list about curl. why curl isn't > mentioned anywhere in the documentation for fopen() and fsockopen() if > it's needed for those functions? > why would i need curl compiled in php if i already have openssl compiled with > it? > > the machine i'm using is a freeBSD 4.6 box with apache 1.3.27 and OpenSSL > 0.9.6h, php is 4.3.1... > > i did similar posts on other php lists but everybody's quite.. > > thanks > > > > > -- > PHP General Mailing List (http://www.php.net/) > To unsubscribe, visit: http://www.php.net/unsub.php > -- Member - Liberal International On 11 Sept 2001 the WORLD was violated. This is [EMAIL PROTECTED] Ici [EMAIL PROTECTED] Society MUST be saved! Extremists must dissolve. Quebec - elir les gagnant qui peut deplacer le PQ la plus vite -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
