Newsgroups: php.internals Path: news.php.net Xref: news.php.net php.internals:70716 Return-Path: Mailing-List: contact internals-help@lists.php.net; run by ezmlm Delivered-To: mailing list internals@lists.php.net Received: (qmail 10906 invoked from network); 17 Dec 2013 16:10:58 -0000 Received: from unknown (HELO lists.php.net) (127.0.0.1) by localhost with SMTP; 17 Dec 2013 16:10:58 -0000 Authentication-Results: pb1.pair.com header.from=ajf@ajf.me; sender-id=pass Authentication-Results: pb1.pair.com smtp.mail=ajf@ajf.me; spf=pass; sender-id=pass Received-SPF: pass (pb1.pair.com: domain ajf.me designates 198.187.29.233 as permitted sender) X-PHP-List-Original-Sender: ajf@ajf.me X-Host-Fingerprint: 198.187.29.233 imap1.ox.registrar-servers.com Received: from [198.187.29.233] ([198.187.29.233:45731] helo=imap1.ox.registrar-servers.com) by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with ESMTP id BE/62-32483-E8770B25 for ; Tue, 17 Dec 2013 11:10:57 -0500 Received: from localhost (localhost [127.0.0.1]) by oxmail.registrar-servers.com (Postfix) with ESMTP id 3792E2000D9; Tue, 17 Dec 2013 11:10:50 -0500 (EST) X-Virus-Scanned: Debian amavisd-new at imap1.ox.registrar-servers.com Received: from oxmail.registrar-servers.com ([127.0.0.1]) by localhost (imap1.ox.registrar-servers.com [127.0.0.1]) (amavisd-new, port 10024) with LMTP id 5XS_J9sranaw; Tue, 17 Dec 2013 11:10:50 -0500 (EST) Received: from [192.168.0.13] (unknown [94.13.99.191]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by oxmail.registrar-servers.com (Postfix) with ESMTPSA id C68352000E0; Tue, 17 Dec 2013 11:10:47 -0500 (EST) Message-ID: <52B07781.1070604@ajf.me> Date: Tue, 17 Dec 2013 16:10:41 +0000 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:24.0) Gecko/20100101 Thunderbird/24.2.0 MIME-Version: 1.0 To: Joe Watkins , internals@lists.php.net, Rasmus Lerdorf References: <52AFABF7.60105@sugarcrm.com> <52B004E2.30607@php.net> <52B041E5.9070903@php.net> <52B0597F.600@lerdorf.com> <52B05DE8.7090205@php.net> In-Reply-To: <52B05DE8.7090205@php.net> Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit Subject: Re: [PHP-DEV] [VOTE] TLS Peer Verification From: ajf@ajf.me (Andrea Faulds) On 17/12/13 14:21, Joe Watkins wrote: > > Excluding Windows, most users will have it solved by their distros > package maintainers, that's pretty clear. We will have to include the > file for Windows, and I see no harm in not doing the same for the source > distribution either, I do see how not including it can be a problem, > don't see how excluding it solves anything. Including it doesn't make it > harder to override, it doesn't change that package maintainers will > likely be responsible, but it does allow more possibilities of > successful execution wherever the source or binary distribution came from. > Windows has its own system CA store, doesn't it? Is there some reason why we can't just use that? Wrong format? -- Andrea Faulds http://ajf.me/