L-electron-Rare/moodle
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

MDL-40615 Repository: Updated Amazon S3 library

Browse Source 
Fixed insecure use of CURLOPT_SSL_VERIFYHOST
This commit is contained in:
Frederic Massart
2013-07-30 09:04:58 +12:00
committed by Sam Hemelryk
parent a38830a07b
commit 2d325dfcf8
2 changed files with 2 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
repository/s3/README_MOODLE.txt
+1 -2
View File
@@ -3,8 +3,7 @@
Amazon S3 PHP Class
Cloned from git://github.com/tpyo/amazon-s3-php-class.git
Branch master
On July 23rd 2012
At commit 56770370c33a5310c5e07a9d22aef8c162f150ee
https://github.com/tpyo/amazon-s3-php-class
http://undesigned.org.za/2007/10/22/amazon-s3-php-class
repository/s3/S3.php
+1 -1
View File
@@ -1809,7 +1809,7 @@ final class S3Request
if (S3::$useSSL)
{
// SSL Validation can now be optional for those with broken OpenSSL installations
curl_setopt($curl, CURLOPT_SSL_VERIFYHOST, S3::$useSSLValidation ? 1 : 0);
curl_setopt($curl, CURLOPT_SSL_VERIFYHOST, S3::$useSSLValidation ? 2 : 0);
curl_setopt($curl, CURLOPT_SSL_VERIFYPEER, S3::$useSSLValidation ? 1 : 0);
if (S3::$sslKey !== null) curl_setopt($curl, CURLOPT_SSLKEY, S3::$sslKey);