From b4057cfeb494dac9ad650e7deadec695c20dc912 Mon Sep 17 00:00:00 2001
From: friendica <info@friendica.com>
Date: Wed, 13 Feb 2013 20:09:30 -0800
Subject: use our own CA bundle as authoritative for backend communications.
 This avoids OS dependent CA validity mismatches.

---
 include/network.php | 9 +++++++++
 1 file changed, 9 insertions(+)

(limited to 'include/network.php')

diff --git a/include/network.php b/include/network.php
index 321eb375f..ecc54d818 100644
--- a/include/network.php
+++ b/include/network.php
@@ -1,6 +1,11 @@
 <?php
 
 
+
+function get_capath() {
+	return appdirpath() . '/library/cacert.pem';
+}
+
 // curl wrapper. If binary flag is true, return binary
 // results. 
 
@@ -14,6 +19,7 @@ function fetch_url($url,$binary = false, &$redirects = 0, $timeout = 0, $accept_
 		return false;
 
 	@curl_setopt($ch, CURLOPT_HEADER, true);
+	@curl_setopt($ch, CURLOPT_CAINFO, get_capath());
 
 	if (!is_null($accept_content)){
 		curl_setopt($ch,CURLOPT_HTTPHEADER, array (
@@ -104,6 +110,7 @@ function post_url($url,$params, $headers = null, &$redirects = 0, $timeout = 0)
 		return false;
 
 	curl_setopt($ch, CURLOPT_HEADER, true);
+	@curl_setopt($ch, CURLOPT_CAINFO, get_capath());
 	curl_setopt($ch, CURLOPT_RETURNTRANSFER,true);
 	curl_setopt($ch, CURLOPT_POST,1);
 	curl_setopt($ch, CURLOPT_POSTFIELDS,$params);
@@ -200,6 +207,7 @@ function z_fetch_url($url,$binary = false, &$redirects = 0, $timeout = 0, $accep
 		return false;
 
 	@curl_setopt($ch, CURLOPT_HEADER, true);
+	@curl_setopt($ch, CURLOPT_CAINFO, get_capath());
 
 	if (!is_null($accept_content)){
 		curl_setopt($ch,CURLOPT_HTTPHEADER, array (
@@ -288,6 +296,7 @@ function z_post_url($url,$params, $headers = null, &$redirects = 0, $timeout = 0
 		return ret;
 
 	curl_setopt($ch, CURLOPT_HEADER, true);
+	@curl_setopt($ch, CURLOPT_CAINFO, get_capath());
 	curl_setopt($ch, CURLOPT_RETURNTRANSFER,true);
 	curl_setopt($ch, CURLOPT_POST,1);
 	curl_setopt($ch, CURLOPT_POSTFIELDS,$params);
-- 
cgit v1.2.3