phpmailer and certificates

[lonestar]

Hello,
I have an issue since when phpmailer has been updated recently. Sending articles via email through my own local smtp server fails with:

Code: Select all

stream_socket_enable_crypto(): SSL operation failed with code 1. OpenSSL Error messages: error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed

I've looked around for the problem and everybody say that PHP 5.6 added checks, that it must be an error in certificate chain in the mail server, bla bla. But everything is ok and TLS checks performed using external verification tools all say that the certificate is fine.

The only possible reason I found is that it's a wildcard certificate, issued for *.mydomain.com while the server name is mail.mydomain.com. I believe it's possible that PHP name peer verification somehow fails in accepting the wildcard certificate as valid for this host.

So the only solution I've found is editing ttrssmailer.php and adding few lines for:

Code: Select all

$this->SMTPOptions = array(
    'ssl' => array(
        'verify_peer' => false,
        'verify_peer_name' => false
    )
);

My questions:
does any other have this kind of issue?
and, is this the best way to workaround the issue? Could it be possible to add a built-in option for disabling ssl peer name verification in controversial situations when using smtp?

Thanks,
ciao

[fox]

>Could it be possible to add a built-in option for disabling ssl peer name verification in controversial situations when using smtp?

no

[lonestar]

>Could it be possible to add a built-in option for disabling ssl peer name verification in controversial situations when using smtp?

no

kinda felt it coming.
ok, I will re-patch ttrssmailer.php at every update.

[fox]

you can just locally commit your change into git and likely be good for years from now on

[lonestar]

you can just locally commit your change into git and likely be good for years from now on

oh that's a good suggestion, thank you.