Optionally, FeedsSyndicationParser should suppress peer verification. This is necessary for SSL feeds with invalid certificates. In some circumstances it is fine to ignore warnings that result in a failed download. FeedAPI's Common Syndication parser supported this.

See CURLOPT_SSL_VERIFYPEER option for curl.

Comments

alex_b’s picture

alex_b commented
Status: Active » Postponed

Postponing for now.

Anonymous’s picture

Anonymous (not verified) commented
Version: 6.x-1.x-dev » 7.x-2.0-alpha4
Status: Postponed » Active

The 7.x branch seems to implement this

      if ($accept_invalid_cert) {
        curl_setopt($download, CURLOPT_SSL_VERIFYPEER, 0);
      }

I work with a custom "FeedsCustomHTTPFetcher.inc" and don't understand how to pass the setting $accept_invalid_cert = TRUE?

megachriz’s picture

megachriz
Primary language Dutch
commented
Issue summary: View changes
Status: Active » Closed (duplicate)

This was fixed in #1062178: Add configuration option to allow invalid/unverified or (self certified) SSL certificates.