MDL-40615 Repository: Updated Amazon S3 library

Fixed insecure use of CURLOPT_SSL_VERIFYHOST
This commit is contained in:
Frederic Massart 2013-07-19 16:02:56 +08:00 committed by Sam Hemelryk
parent 6cef3dfe8e
commit d72d541db5
2 changed files with 2 additions and 3 deletions

View File

@ -3,8 +3,7 @@
Amazon S3 PHP Class
Cloned from git://github.com/tpyo/amazon-s3-php-class.git
Branch master
On July 23rd 2012
At commit 56770370c33a5310c5e07a9d22aef8c162f150ee
https://github.com/tpyo/amazon-s3-php-class
http://undesigned.org.za/2007/10/22/amazon-s3-php-class

View File

@ -1809,7 +1809,7 @@ final class S3Request
if (S3::$useSSL)
{
// SSL Validation can now be optional for those with broken OpenSSL installations
curl_setopt($curl, CURLOPT_SSL_VERIFYHOST, S3::$useSSLValidation ? 1 : 0);
curl_setopt($curl, CURLOPT_SSL_VERIFYHOST, S3::$useSSLValidation ? 2 : 0);
curl_setopt($curl, CURLOPT_SSL_VERIFYPEER, S3::$useSSLValidation ? 1 : 0);
if (S3::$sslKey !== null) curl_setopt($curl, CURLOPT_SSLKEY, S3::$sslKey);