Re: [PHP-DEV] Re: networking.c and fopen wrappers etc. (was RE: [ PHP-DEV] some IPv6 code added, compile problems anyone?) From: Stig Venaas (Stig.Venaas <email protected>)
Date: 09/07/00

Hi

On Thu, Sep 07, 2000 at 06:40:59PM +0100, Wez Furlong wrote:
> It might be an idea to make the protocol detection in fsockopen more
> generic, or move it to your new host connect call somehow. This would then
> make it easy for the http fopen-wrapper to use HTTPS (which is one of the
> things I would make use of the most).

I think hostconnect should be more low level, so there should be some
other code that determines whether to use UDP or TCP and then calls
hostconnect.

When using SSL, you could do

s = php_hostconnect(.....);
sbuf = php_sockcreate(s);
if (sbuf) {
...
        sslret = SSL_connect(ssl);
}

right?

> It would be nice to allow the user to verify certs etc. using the SSL API
> just by passing the socket you get back from fsockopen as the "handle".

You may also need something to select certs to use before doing
SSL_new or? Don't know this so well.

> The nice thing about using OpenSSL is that it is very lightweight,
> especially if your server is already using mod_ssl. (Although I haven't used
> cURL, I have heard that it is a bit "heavy").

You may be right. Using OpenSSL seems pretty simple actually.
BTW, what about PRNG seeds? Don't you need to feed it some
random data to get something secure?

> Anyway, I will leave it to you to look through and see how it fits into your
> plans.

Fits very well if what I write about hostconnect above is correct (:

Stig 

-- 
PHP Development Mailing List <http://www.php.net/>
To unsubscribe, e-mail: php-dev-unsubscribe <email protected>
For additional commands, e-mail: php-dev-help <email protected>
To contact the list administrators, e-mail: php-list-admin <email protected>