[phpxmlrpc-devel] Missing SSL Option when semnding xmlrpcmsg?

[Gaetano G. <giu...@se...>]

Hello,

I'm just taking my first steps into the world of secure communication, =
so excuse me if this is absolutely irrelevant.

When sending an xmlrpcmsg over https, the xmlrpc_client object has =
methods that allow it to check the peer certificate validity.
But there is no option to set the CA certificate to be used in the =
verification process (e.g. if I use a certificate signed by my company's =
CA, which is not trusted by anyone in the world but me).
I figured out that the curl option to set CA certificates has to be set =
between the calls to curl_init and curl_close, so the only place to put =
it is in the xmlrpc_client->sendpayloadhttps method.

Is this correct? In that case maybe we should add an =
xmlrpc_client->setCAInfo method. (This would be better than setting =
CURLOPT_CAPATH, that is not supported under windows).


Thanks, gaetano