使用 tls 时如何让 fsockopen 忽略证书

Question

In PHP7.0, when using fsockopen to connect to open a https connection (hosted in same host), using a host name like tls://foo.localhost , I am getting an error that looks like

fsockopen(): Peer certificate CN="bar" did not match expected CN="foo.localhost"

Connection is not opened.

Same code worked in PHP 5.5 (that is less strict checking vertificates). I do not really care about verifying certificates (this code runs in a unit test and integration suite, connecting only to localhost). Tests need to be run against http and https, though.

I know how to disable those checks when using file_get_contents .

How can I disable the peer certificate verification when using fsockopen?

Answer 1

fsockopen don't provide method to ignore peer certificate errors.

You have to use stream_socket_client with context . Available ssl/tls context options are available here .

Example of opening socket without peer verification

$context = stream_context_create([
    'ssl' => [
        'verify_peer' => false,
        'verify_peer_name' => false
    ]
]);

$hostname = "tls://foo.localhost:8123";
$socket = stream_socket_client($hostname, $errno, $errstr, ini_get("default_socket_timeout"), STREAM_CLIENT_CONNECT, $context);