Debian Bug report logs - #730440
php5-curl: new php5-curl does not accept invalid certificates

version graph

Package: php5-curl; Maintainer for php5-curl is (unknown);

Reported by: kpande <kash@cdoc.ca>

Date: Mon, 25 Nov 2013 02:51:02 UTC

Severity: important

Tags: moreinfo

Found in version php5/5.4.4-14+deb7u5

Done: Ondřej Surý <ondrej@sury.org>

Bug is archived. No further changes may be made.

Toggle useless messages

View this report as an mbox folder, status mbox, maintainer mbox


Report forwarded to debian-bugs-dist@lists.debian.org, Debian PHP Maintainers <pkg-php-maint@lists.alioth.debian.org>:
Bug#730440; Package php5-curl. (Mon, 25 Nov 2013 02:51:06 GMT) (full text, mbox, link).


Acknowledgement sent to kpande <kash@cdoc.ca>:
New Bug report received and forwarded. Copy sent to Debian PHP Maintainers <pkg-php-maint@lists.alioth.debian.org>. (Mon, 25 Nov 2013 02:51:06 GMT) (full text, mbox, link).


Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: kpande <kash@cdoc.ca>
To: Debian Bug Tracking System <submit@bugs.debian.org>
Subject: php5-curl: new php5-curl does not accept invalid certificates
Date: Sun, 24 Nov 2013 21:40:57 -0500
Package: php5-curl
Version: 5.4.4-14+deb7u5
Severity: important

I use a PHP script that uses curl_setopt to accept invalid certificates and also disable verification of certificates. Old version 5.4.4-14 works but new 5.4.4-14+deb7u5 
does not.

-- System Information:
Debian Release: 7.2
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 3.4.69-vanillabean1 (SMP w/4 CPU cores)
Locale: LANG=en_CA.UTF-8, LC_CTYPE=en_CA.UTF-8 
Shell: /bin/sh linked to /bin/dash

Versions of packages php5-curl depends on:
ii  dpkg                        1.16.12
ii  libc6                       2.13-38
ii  libcurl3                    7.26.0-1+wheezy6
ii  php5-cgi [phpapi-20100525]  5.4.4-14+deb7u5
ii  php5-cli [phpapi-20100525]  5.4.4-14+deb7u5
ii  php5-common                 5.4.4-14+deb7u5
ii  ucf                         3.0025+nmu3

php5-curl recommends no packages.

php5-curl suggests no packages.

-- debconf information excluded



Information forwarded to debian-bugs-dist@lists.debian.org, Debian PHP Maintainers <pkg-php-maint@lists.alioth.debian.org>:
Bug#730440; Package php5-curl. (Fri, 06 Dec 2013 08:51:04 GMT) (full text, mbox, link).


Acknowledgement sent to Ondřej Surý <ondrej@sury.org>:
Extra info received and forwarded to list. Copy sent to Debian PHP Maintainers <pkg-php-maint@lists.alioth.debian.org>. (Fri, 06 Dec 2013 08:51:04 GMT) (full text, mbox, link).


Message #10 received at 730440@bugs.debian.org (full text, mbox, reply):

From: Ondřej Surý <ondrej@sury.org>
To: kpande <kash@cdoc.ca>, 730440@bugs.debian.org
Subject: Re: [php-maint] Bug#730440: php5-curl: new php5-curl does not accept invalid certificates
Date: Fri, 06 Dec 2013 09:49:54 +0100
tags 730440 +moreinfo

Hi,

could you please provide a test script?

O.

On Mon, Nov 25, 2013, at 3:40, kpande wrote:
> Package: php5-curl
> Version: 5.4.4-14+deb7u5
> Severity: important
> 
> I use a PHP script that uses curl_setopt to accept invalid certificates
> and also disable verification of certificates. Old version 5.4.4-14 works
> but new 5.4.4-14+deb7u5 
> does not.
> 
> -- System Information:
> Debian Release: 7.2
>   APT prefers stable
>   APT policy: (500, 'stable')
> Architecture: amd64 (x86_64)
> 
> Kernel: Linux 3.4.69-vanillabean1 (SMP w/4 CPU cores)
> Locale: LANG=en_CA.UTF-8, LC_CTYPE=en_CA.UTF-8 
> Shell: /bin/sh linked to /bin/dash
> 
> Versions of packages php5-curl depends on:
> ii  dpkg                        1.16.12
> ii  libc6                       2.13-38
> ii  libcurl3                    7.26.0-1+wheezy6
> ii  php5-cgi [phpapi-20100525]  5.4.4-14+deb7u5
> ii  php5-cli [phpapi-20100525]  5.4.4-14+deb7u5
> ii  php5-common                 5.4.4-14+deb7u5
> ii  ucf                         3.0025+nmu3
> 
> php5-curl recommends no packages.
> 
> php5-curl suggests no packages.
> 
> -- debconf information excluded
> 
> _______________________________________________
> pkg-php-maint mailing list
> pkg-php-maint@lists.alioth.debian.org
> http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-php-maint


-- 
Ondřej Surý <ondrej@sury.org>
Knot DNS (https://www.knot-dns.cz/) – a high-performance DNS server



Added tag(s) moreinfo. Request was from Ondřej Surý <ondrej@sury.org> to control@bugs.debian.org. (Fri, 06 Dec 2013 08:51:15 GMT) (full text, mbox, link).


Reply sent to Ondřej Surý <ondrej@sury.org>:
You have taken responsibility. (Wed, 02 Jul 2014 12:21:19 GMT) (full text, mbox, link).


Notification sent to kpande <kash@cdoc.ca>:
Bug acknowledged by developer. (Wed, 02 Jul 2014 12:21:19 GMT) (full text, mbox, link).


Message #17 received at 730440-done@bugs.debian.org (full text, mbox, reply):

From: Ondřej Surý <ondrej@sury.org>
To: 730440-done@bugs.debian.org
Subject: Re: Bug#730440: php5-curl: new php5-curl does not accept invalid certificates
Date: Wed, 02 Jul 2014 14:19:32 +0200
I am sorry, but we cannot fix or debug bugs if you don't provide
complete
information. Thus I am closing the bug.

Feel free to reopen it when you provide a test script.

Cheers,
-- 
Ondřej Surý <ondrej@sury.org>
Knot DNS (https://www.knot-dns.cz/) – a high-performance DNS server



Bug archived. Request was from Debbugs Internal Request <owner@bugs.debian.org> to internal_control@bugs.debian.org. (Thu, 31 Jul 2014 07:29:38 GMT) (full text, mbox, link).


Send a report that this bug log contains spam.


Debian bug tracking system administrator <owner@bugs.debian.org>. Last modified: Sun Jul 2 03:27:50 2023; Machine Name: bembo

Debian Bug tracking system

Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

Copyright © 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson, 2005-2017 Don Armstrong, and many other contributors.