Re: [PHP-DEV] Soap over SSL and

2009-07-12 Thread Dmitry Stogov
it's not the only reason. ext/soap also supports digital authentication which is still unsupported by streams. (may be something else). Thanks. Dmitry. David Zülke wrote: On 10.07.2009, at 17:00, Hannes Magnusson wrote: On Fri, Jul 10, 2009 at 16:58, Uwe Schindlertheta...@php.net wrote: As

Re: [PHP-DEV] Soap over SSL and

2009-07-10 Thread David Zülke
On 07.07.2009, at 16:18, Brian A. Seklecki wrote: On Tue, 2009-07-07 at 15:42 +0200, endrazine wrote: It is lacking any type of authentication of the payment gateway, which is not acceptable. I agree+++. The problem is that PHP SOAP uses an internal streams library instead of

Re: [PHP-DEV] Soap over SSL and

2009-07-10 Thread endrazine
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Dear list, dear David, David Zülke wrote: In short: $c = new SoapClient( 'https://foo/bar.wsdl', array( 'stream_context = stream_context_create(array( 'ssl' = array( 'verify_peer' = true ) )) ) );

Re: [PHP-DEV] Soap over SSL and

2009-07-10 Thread Hannes Magnusson
On Fri, Jul 10, 2009 at 16:38, endrazineendraz...@gmail.com wrote: David Zülke wrote: $c = new SoapClient(   'https://foo/bar.wsdl',   array(     'stream_context = stream_context_create(array(       'ssl' = array(         'verify_peer' = true       )     ))   ) ); This works and

Re: [PHP-DEV] Soap over SSL and

2009-07-10 Thread Richard Quadling
2009/7/10 David Zülke david.zue...@bitextender.com: On 07.07.2009, at 16:18, Brian A. Seklecki wrote: On Tue, 2009-07-07 at 15:42 +0200, endrazine wrote: It is lacking any type of authentication of the payment gateway, which is not acceptable. I agree+++. The problem is that PHP SOAP

Re: [PHP-DEV] Soap over SSL and

2009-07-10 Thread endrazine
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hannes Magnusson wrote: On Fri, Jul 10, 2009 at 16:38, endrazineendraz...@gmail.com wrote: David Zülke wrote: $c = new SoapClient( 'https://foo/bar.wsdl', array( 'stream_context = stream_context_create(array( 'ssl' = array(

RE: [PHP-DEV] Soap over SSL and

2009-07-10 Thread Uwe Schindler
SAPI developer Bremen, Germany -Original Message- From: endrazine [mailto:endraz...@gmail.com] Sent: Friday, July 10, 2009 4:52 PM To: Hannes Magnusson Cc: David Zülke; PHP internals Subject: Re: [PHP-DEV] Soap over SSL and -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hannes

Re: [PHP-DEV] Soap over SSL and

2009-07-10 Thread Hannes Magnusson
On Fri, Jul 10, 2009 at 16:52, endrazineendraz...@gmail.com wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hannes Magnusson wrote: On Fri, Jul 10, 2009 at 16:38, endrazineendraz...@gmail.com wrote: David Zülke wrote: $c = new SoapClient(   'https://foo/bar.wsdl',   array(    

Re: [PHP-DEV] Soap over SSL and

2009-07-10 Thread Hannes Magnusson
On Fri, Jul 10, 2009 at 16:58, Uwe Schindlertheta...@php.net wrote: As far as I know, SOAP does not use the HTTP wrappers directly, it uses only sockets/ssl for communication (so the context applies only to the lower level SSL socket). So CURL is not used, because PHP's HTTP streams are not

Re: [PHP-DEV] Soap over SSL and

2009-07-10 Thread endrazine
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hannes Magnusson wrote: On Fri, Jul 10, 2009 at 16:58, Uwe Schindlertheta...@php.net wrote: As far as I know, SOAP does not use the HTTP wrappers directly, it uses only sockets/ssl for communication (so the context applies only to the lower level

Re: [PHP-DEV] Soap over SSL and

2009-07-10 Thread David Zülke
On 10.07.2009, at 17:00, Hannes Magnusson wrote: On Fri, Jul 10, 2009 at 16:58, Uwe Schindlertheta...@php.net wrote: As far as I know, SOAP does not use the HTTP wrappers directly, it uses only sockets/ssl for communication (so the context applies only to the lower level SSL socket). So

Re: [PHP-DEV] Soap over SSL and

2009-07-08 Thread endrazine
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Thank you for your replies. First of, I am glad I am not the only one to think there is an issue with the way SoapClient() deals with ssl. Now, I have been suggested a few ways to deal with the problem, partly off list, and I'd appreciate help in

Re: [PHP-DEV] Soap over SSL and

2009-07-08 Thread Richard Lynch
On Wed, July 8, 2009 7:34 am, endrazine wrote: -BEGIN PGP SIGNED MESSAGE- The first possibility is to directly patch SoapClient() to force it use libcurl (wich has ssl verification features). While doable tehcnically, I wonder if my patch for it would be merged into the framework, or

Re: [PHP-DEV] Soap over SSL and

2009-07-08 Thread Sriram Natarajan
Would it make sense if enabling soap module forces php build system to enable curl-wrappers ? endrazine wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Thank you for your replies. First of, I am glad I am not the only one to think there is an issue with the way SoapClient() deals with

Re: [PHP-DEV] Soap over SSL and

2009-07-07 Thread Cristian Rodríguez
On 07/07/09 10:18, Brian A. Seklecki wrote: If it did use libcurl, dozens of problems over the last few years would have magically solved themselves (pipe-line'ing, keep-alive, socket options, PKI, etc.) Not only this extension but pretty much everything should use curl IMHO, it is included