Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:44911
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Received-SPF: pass (pb1.pair.com: domain googlemail.com designates 209.85.218.206 as permitted sender)
DomainKey-Status: bad
DomainKey-Signature: a=rsa-sha1; c=nofws;
        d=googlemail.com; s=gamma;
        h=mime-version:reply-to:in-reply-to:references:from:date:message-id
         :subject:to:cc:content-type:content-transfer-encoding;
        b=E+LChFY6qeonBWuuvowOsq1+n4bPtglufygkmnHo8j/8fE45uMs7Hp57m4fkV2MJjM
         R+7zjG1T1hwFhm/yvSxDznL1xz5KGFTaO2bZzYt//mWsA+ovGCtXPgpJMKiSR+L+IN5W
         bqIfwFIel73nIVfHIRk/XRMLvboU7p6cs7SJE=
MIME-Version: 1.0
Reply-To: RQuadling@googlemail.com
In-Reply-To: <D34F695E-19FF-4D4C-AF00-5AAC5371B9CB@bitextender.com>
References: <4A5350C7.5060600@gmail.com> <1246976308.10382.68.camel@soundwave.ws.pitbpa0.priv.collaborativefusion.com> 
	<D34F695E-19FF-4D4C-AF00-5AAC5371B9CB@bitextender.com>
Date: Fri, 10 Jul 2009 15:49:05 +0100
Message-ID: <10845a340907100749w57c04c87nc029157fb739388a@mail.gmail.com>
To: =?UTF-8?B?RGF2aWQgWsO8bGtl?= <david.zuelke@bitextender.com>
Cc: "Brian A. Seklecki" <seklecki@noc.cfi.pgh.pa.us>, endrazine <endrazine@gmail.com>, 
	PHP internals <internals@lists.php.net>
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
Subject: Re: [PHP-DEV] Soap over SSL and
From: rquadling@googlemail.com (Richard Quadling)

2009/7/10 David Z=C3=BClke <david.zuelke@bitextender.com>:
> On 07.07.2009, at 16:18, Brian A. Seklecki wrote:
>
>> On Tue, 2009-07-07 at 15:42 +0200, endrazine wrote:
>>>
>>> It is lacking any type of authentication of the payment gateway, which
>>> is not acceptable.
>>>
>>
>> I agree+++.
>>
>> The problem is that PHP SOAP uses an internal "streams" library instead
>> of libcurl; the former lacks, the later has, client/server PKI support.
>
> Nonsense. ext/soap has support for all of this through PHP's "https" stre=
am
> which wraps the "ssl" stream.
>
> Please RT(F)M:
> http://php.net/manual/en/soapclient.soapclient.php
> http://php.net/manual/en/context.ssl.php
>
> In short:
>
> $c =3D new SoapClient(
> =C2=A0'https://foo/bar.wsdl',
> =C2=A0array(
> =C2=A0 =C2=A0'stream_context" =3D> stream_context_create(array(
> =C2=A0 =C2=A0 =C2=A0'ssl' =3D> array(
> =C2=A0 =C2=A0 =C2=A0 =C2=A0'verify_peer' =3D> true
> =C2=A0 =C2=A0 =C2=A0)
> =C2=A0 =C2=A0))
> =C2=A0)
> );
>
> There is the whole range of options related to certs, including for CA ce=
rts
> etc. SoapClient itself has an option for a 'local_cert' as well.
>
> - David


That's a great example. When SVN is back online, I'll add that as an exampl=
e.


--=20
-----
Richard Quadling
Zend Certified Engineer : http://zend.com/zce.php?c=3DZEND002498&r=3D213474=
731
"Standing on the shoulders of some very clever giants!"
ZOPA : http://uk.zopa.com/member/RQuadling