Finally got the patch for this to a state where it can be considered for 
upstream. Patch is against today's SVN.

I've used $wgCollectionPDFserverCert as the variable in LocalSettings.php to 
configure the server certificate, this could obviously be changed. It has to be 
an absolute path to the file as far as I can see - although I suppose in 
principal one of the other variables for where the wiki files are located could 
be used to provide the first chunk of the path. Obviously the file needs to be 
readable to php, which usually means putting it somewhere in the web 
directories. This doesn't pose a security risk because you can obtain the 
server certificate by connecting to the server, the only difference with the 
file copy is that you know it is correct and hasn't been fiddled with. The 
default value of $wgCollectionPDFserverCert is null which means nothing changes 
from previous behaviour.

Richard



----- Original Message ----
> From: Johannes Beigel <[EMAIL PROTECTED]>
> To: [email protected]
> Sent: Friday, 19 September, 2008 11:01:36
> Subject: [mwlib] Re: Invalid base URL
> 
> 
> Am 18.09.2008 um 17:33 schrieb Richard Ash:
> > If I worked up a patch against the Collection extension to use  
> > $wgCollectionPDFserverCert to specify a .pem file for Curl to use to  
> > validate the PDF server would you be interested?
> 
> Sure, please mail it to me, I'll have a look. Thanks!
> 
> Regards,
> Johannes



      
--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups 
"mwlib" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at http://groups.google.com/group/mwlib?hl=en
-~----------~----~----~----~------~----~------~--~---

Attachment: curl-security-cert.patch
Description: Binary data

Reply via email to