The drupal_http_request function uses an fsockopen call to make requests. In the case of https URIs, it prepends "ssl://" to the front of the URL. When a web server has turned off SSLv2 and SSLv3, e.g. to prevent the Poodle vulnerability, this fsockopen call fails. The solution is to use tls:// instead.

CommentFileSizeAuthor
#5 drupal_http_request_uses_ssl_over_tls-2565311-5.patch898 bytesjulien
#2 drupal_http_request_uses_ssl_over_tls-2565311-2.patch673 bytesjulien

Comments

jimethn created an issue. See original summary.

julien’s picture

julien commented
StatusFileSize
new drupal_http_request_uses_ssl_over_tls-2565311-2.patch673 bytes

i'm not sure if the port needs to change also.

jimethn’s picture

jimethn commented

julien's patch is the same change I made in my environment and it works.

julien’s picture

julien commented
Status: Active » Needs review
julien’s picture

julien commented
StatusFileSize
new drupal_http_request_uses_ssl_over_tls-2565311-5.patch898 bytes

added socket encryption

Status: Needs review » Closed (outdated)

Automatically closed because Drupal 6 is no longer supported. If the issue verifiably applies to later versions, please reopen with details and update the version.