Added config parameter to allow self-signed certificates for the HTTP client

2 files changed, 12 insertions, 2 deletions

diff --git a/app/Core/Http/Client.php b/app/Core/Http/Client.php
index 16e423dc..3c4397e2 100644
--- a/app/Core/Http/Client.php
+++ b/app/Core/Http/Client.php
@@ -163,6 +163,7 @@ class Client extends Base
 
         if (DEBUG) {
             $this->logger->debug('HttpClient: url='.$url);
+            $this->logger->debug('HttpClient: headers='.var_export($headers, true));
             $this->logger->debug('HttpClient: payload='.$content);
             $this->logger->debug('HttpClient: metadata='.var_export(@stream_get_meta_data($stream), true));
             $this->logger->debug('HttpClient: response='.$response);
@@ -201,7 +202,7 @@ class Client extends Base
                 'timeout' => self::HTTP_TIMEOUT,
                 'max_redirects' => self::HTTP_MAX_REDIRECTS,
                 'header' => implode("\r\n", $headers),
-                'content' => $content
+                'content' => $content,
             )
         );
 
@@ -210,6 +211,14 @@ class Client extends Base
             $context['http']['request_fulluri'] = true;
         }
 
+        if (HTTP_VERIFY_SSL_CERTIFICATE === false) {
+            $context['ssl'] = array(
+                'verify_peer' => false,
+                'verify_peer_name' => false,
+                'allow_self_signed' => true,
+            );
+        }
+
         return $context;
     }
 }
diff --git a/app/constants.php b/app/constants.php
index 3c404d8b..604f6acd 100644
--- a/app/constants.php
+++ b/app/constants.php
@@ -128,8 +128,9 @@ defined('BRUTEFORCE_LOCKDOWN_DURATION') or define('BRUTEFORCE_LOCKDOWN_DURATION'
 // See http://php.net/manual/en/session.configuration.php#ini.session.cookie-lifetime
 defined('SESSION_DURATION') or define('SESSION_DURATION', 0);
 
-// HTTP client proxy
+// HTTP Client
 defined('HTTP_PROXY_HOSTNAME') or define('HTTP_PROXY_HOSTNAME', '');
 defined('HTTP_PROXY_PORT') or define('HTTP_PROXY_PORT', '3128');
 defined('HTTP_PROXY_USERNAME') or define('HTTP_PROXY_USERNAME', '');
 defined('HTTP_PROXY_PASSWORD') or define('HTTP_PROXY_PASSWORD', '');
+defined('HTTP_VERIFY_SSL_CERTIFICATE') or define('HTTP_VERIFY_SSL_CERTIFICATE', true);