Comments on: Using cURL in PHP to access HTTPS (SSL/TLS) protected sites

By: Moses

Moses — Mon, 08 Mar 2010 17:54:18 +0000

Dear Peter,

I discover that my yahoomail could not open the message page, instead of taking me to my page after loging it will display done without diplay the page. what can i do? meanwhile other website were open correctly.

Thanks

Reagards

Moses

By: Morten Juel

Morten Juel — Sun, 17 Jan 2010 12:31:50 +0000

Thanks for this post, works like a charm Saved me hours.

By: Peter Chng

Peter Chng — Sat, 02 Jan 2010 16:38:27 +0000

@RD
As Tom indicated, you will have to re-download the certificate if it’s re-issued. Even if the public/private key used in the certificate stays the same, the other details (serial number, issue/expiry dates) will all be different, so in effect it’s a completely different certificate.

By: RD

RD — Sat, 02 Jan 2010 09:54:43 +0000

Thanks Tom! Much appreciated. Have an excellent 2010.

By: Tom

Tom — Tue, 29 Dec 2009 23:26:59 +0000

@RD

I haven’t encountered this situation yet, but I’ve got the expiration dates marked in my calendar…

Since the cert. will expire and the site will get a new one, then I’d expect the key it contains to be different – and hence your local copy will need updating if you’re using it to verify against with cURL / PHP.

By: RD

RD — Tue, 29 Dec 2009 20:57:47 +0000

Great article! Thank you!

Just a quick question – when the certificate on the server expires and the CA has to re-issue the certificate, would you have to go through the process of downloading the PEM file (as shown in the illustration above)?

Thanks so much again!

By: J Marriott

J Marriott — Tue, 22 Dec 2009 16:44:14 +0000

Thank you for this; worked perfectly and finally allowed me to stop banging my head on the desk!

Cheers,

James.

By: John

John — Fri, 18 Dec 2009 16:45:05 +0000

Thank you so much for this. It was a huge help in solving an issue I was having.

By: James Titcumb » Blog Archive » cURL Tips – HTTPS requests

James Titcumb » Blog Archive » cURL Tips – HTTPS requests — Tue, 15 Dec 2009 20:55:35 +0000

[...] by checking against the genuine CA certificate in PEM format. There are plenty of tutorials (e.g. here) on the internet to obtain the PEM certificate, so I won’t go into that here. All you need to [...]

By: OctaneFX

OctaneFX — Sun, 08 Nov 2009 04:17:47 +0000

Thanks, works for me

but over proxy I can´t access any https hosts.

function getPage($proxy, $url, $referer, $agent, $header, $timeout) {
$ch = curl_init();
curl_setopt($ch, CURLOPT_URL, $url);
curl_setopt($ch, CURLOPT_HEADER, $header);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
curl_setopt($ch, CURLOPT_PROXY, $proxy);
curl_setopt($ch, CURLOPT_HTTPPROXYTUNNEL, 0);
curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, $timeout);
curl_setopt($ch, CURLOPT_REFERER, $referer);
curl_setopt($ch, CURLOPT_USERAGENT, $agent);
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, false);

curl_setopt($ch, CURLOPT_FRESH_CONNECT, 1);
$result['EXE'] = curl_exec($ch);
$result['INF'] = curl_getinfo($ch);
$result['ERR'] = curl_error($ch);

curl_close($ch);

return $result;
}

$proxyip=”66.178.105.245:8080″;
$result = getPage($proxyip,’https://twitter.com/signup?follow=octanefx&commit=Join+today!’,'http://www.google.com/’,'Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.0.8) Gecko/2009032609 Firefox/3.0.8′,1,5);
print_r($result);