How to force a certain TLS version in a PHP stream context for the ssl:// transport? -


how can force tlsv1.0 in php stream context when trying access https url?

i’m looking along lines of this:

$context = stream_context_create(   array(     'ssl' => array(       'protocol_version' => 'tls1',     ),   )); file_get_contents('https://example.com/test', false, $context);

background

actually i’m facing an issue in ubuntu 12.04 when working php’s soapclient. unfortunately, server i’m trying connect support sslv3.0/tlsv1.0 , fails on default tlsv1.1 negotiation. therefore i’d explicitly set protocol of ssl:// transport tlsv1.0.

php 5.6+ users

this new feature documented on php 5.6 openssl changes page.

at time of writing this, php5.6 in beta1 , isn't overly useful. people of future - lucky you!

the future upon us. php 5.6 thing , use should encouraged. aware deprecates used things mysql_* functions care should taken when upgrading.

everyone else

@toubsen correct in answer - isn't directly possible. elaborate on suggested workarounds... when working around problem supplier's api server wasn't correctly negotiating tlsv1.2 down supported tlsv1.0, sending small subset of ciphers seemed allow negotiation complete correctly. stream context code is:

$context = stream_context_create(     [         'ssl' => [             'ciphers' => 'dhe-rsa-aes256-sha:dhe-dss-aes256-sha:aes256-sha:krb5-des-cbc3-md5:krb5-des-cbc3-sha:edh-rsa-des-cbc3-sha:edh-dss-des-cbc3-sha:des-cbc3-sha:des-cbc3-md5:dhe-rsa-aes128-sha:dhe-dss-aes128-sha:aes128-sha:rc2-cbc-md5:krb5-rc4-md5:krb5-rc4-sha:rc4-sha:rc4-md5:rc4-md5:krb5-des-cbc-md5:krb5-des-cbc-sha:edh-rsa-des-cbc-sha:edh-dss-des-cbc-sha:des-cbc-sha:des-cbc-md5:exp-krb5-rc2-cbc-md5:exp-krb5-des-cbc-md5:exp-krb5-rc2-cbc-sha:exp-krb5-des-cbc-sha:exp-edh-rsa-des-cbc-sha:exp-edh-dss-des-cbc-sha:exp-des-cbc-sha:exp-rc2-cbc-md5:exp-rc2-cbc-md5:exp-krb5-rc4-md5:exp-krb5-rc4-sha:exp-rc4-md5:exp-rc4-md5',         ],     ] );

soap users

php's soap client doesn't use curl, nor seem use default context set stream_context_set_default. such, created context needs passed soapclient constructor in 2nd parameter such:

$soap_client = new soapclient('http://webservices.site.com/wsdlfile.wsdl', array('stream_context' => $context));

why ciphers?

running command openssl ciphers on server gives list of supported ciphers in above format. running openssl ciphers -v tells tlsv1.2 specific. above list compiled of non-tlsv1.2 ciphers reported openssl.

openssl ciphers -v | grep -v 'tlsv1.2' | cut -d ' ' -f 1 | tr "\n" ':'


Comments

Post a Comment

Popular posts from this blog

jquery - How can I dynamically add a browser tab? -

since using iframes house external pages are, accounts "not preferred method" , disallowed sites (flickr, one), want dynamically generate browser tabs. e.g., when user submits form, want dynamically generate tab on browser in response submitted. e.g., might want add new tab url like: http://www.bigsurgarrapata.com/contact how in jquery? you want form target attribute action attribute. http://www.w3schools.com/tags/att_form_target.asp browsers have ultimate control on result of target attribute open new tab value of _blank. <form action="contact_submit.php" target="_blank" method="post">
Read more

node.js - Getting the socket id,user id pair of a logged in user(s) -

i have web application done using node js , in it,i have authentication system requires users log in before can access pages. have 2 pages,the homepage , updates page. from read docs,a new socket id issued when user opens tab in browser. me being admin,i know socket id of logged in user , more so,the socket id,logged in user id pair logged in users. what method can use socket id,logged in user id pair make sure broadcast realtime info users online?.
Read more

keyboard - C++ GetAsyncKeyState alternative -

i using windows.h library's getasynckeystate function define key pushed on keyboard . here program returns int value of pushed key example. #include <iostream> #include <windows.h> using namespace std; int main (){ char i; for(i=8;i<190;i++){ if(getasynckeystate(i)== -32767){ cout<<int (i)<<endl; } } return 0; } but trying make opengl simple game , function appeared slow . there function not need cycle 180 times , if statement . thanks you're trying make opengl game, you're going use glfw. if that's case can away using glfwgetkey() such: if (glfwgetkey(glfw_key_up) == glfw_press) {...} if (glfwgetkey(glfw_key_down) == glfw_press) {...} that method nicely explained in tutorial 6 opengl-tutorial.org . should start first tutorial of beginners tutorials , later intermediate tutorials . if you're going make win32 window can listen wm_keydown or wm_keyup messages , virtua
Read more