From d35cf439943d4cfecf87f00f66288e934c3aa865 Mon Sep 17 00:00:00 2001
From: Jacek Kowalski <jkowalsk@student.agh.edu.pl>
Date: Mon, 17 Aug 2015 14:36:20 +0000
Subject: [PATCH] Verify SSL certificate on PHP 5.5 and older
---
uphpCAS.php | 21 +++++++++++++++++++++
1 files changed, 21 insertions(+), 0 deletions(-)
diff --git a/uphpCAS.php b/uphpCAS.php
index 63bfc51..ea04ed6 100644
--- a/uphpCAS.php
+++ b/uphpCAS.php
@@ -101,6 +101,27 @@
),
);
+ if(version_compare(PHP_VERSION, '5.6', '<')) {
+ $cafiles = array(
+ '/etc/ssl/certs/ca-certificates.crt',
+ '/etc/ssl/certs/ca-bundle.crt',
+ '/etc/pki/tls/certs/ca-bundle.crt',
+ );
+ $cafile = NULL;
+ foreach($cafiles as $file) {
+ if(is_file($file)) {
+ $cafile = $file;
+ break;
+ }
+ }
+
+ $url = parse_url($this->serverUrl);
+ $context['ssl']['cafile'] = $cafile;
+ $context['ssl']['ciphers'] = 'ECDH:DH:AES:CAMELLIA:!SSLv2:!aNULL'
+ .':!eNULL:!EXPORT:!DES:!3DES:!MD5:!RC4:!ADH:!PSK:!SRP';
+ $context['ssl']['CN_match'] = $url['host'];
+ }
+
$data = file_get_contents($this->serverUrl
.'/serviceValidate?service='.urlencode($this->serviceUrl)
.'&ticket='.urlencode($ticket),
--
Gitblit v1.9.1