RE: what does the mysqli real connect MYSQLI_CLIENT_SSL_DONT_VERIFY_SERVER_CERT flag do? How to disable only CN validation?

John Wythe <[email protected]> Thu, 23 Mar 2023 17:27:51 +0000
Newsgroups gmane.comp.php.database
Message-ID <SJ0PR18MB4012E611DDA652CF9231AFAFAA879@SJ0PR18MB4012.namprd18.prod.outlook.com>
--_000_SJ0PR18MB4012E611DDA652CF9231AFAFAA879SJ0PR18MB4012namp_
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64

VGhhbmtzLCBJIGFscmVhZHkgc2F3IHRoYXQgZnJvbSB0aGUgZG9jdW1lbnRhdGlvbi4gSSB3YW50
ZWQgdG8ga25vdyB3aGF0IGlzIHZhbGlkYXRpb24gaW4gdGhpcyBjb250ZXh0PyAgQ29tcGxldGUg
dmVyaWZpY2F0aW9uIG9mIHRoZSBjZXJ0LCBvciBvbmx5IENOIHZlcmlmaWNhdGlvbi4NCkxvb2tp
bmcgYXQgdGhlIHNvdXJjZSBpdCBhcHBlYXJzIHRoaXMgZmxhZyBkaXNhYmxlcyBib3RoLCBpbiB0
aGUgdW5kZXJseWluZyBwaHAvb3BlbnNzbCwgcGx1cyBkb2VzIHNvbWV0aGluZyB3aXRoIEFMTE9X
X1NFTEZfU0lHTkVELg0KDQpNeSBwcm9ibGVtIG5vdyBpczoNCg0KICAxLiAgTW9kaWZ5IHRoZSBD
IHNvdXJjZSBjb2RlIGZvciBteXNxbGkgdG8gYWxsb3cgc2V0dGluZyBvbmx5IHRoZSB1bmRlcmx5
aW5nIHBocC9vcGVuc3NsIFZFUklGWV9OQU1FIG9ubHkNCiAgMi4gIEZpbmQgYSB3YXkgdG8gY2Fs
bCB0aGUgdW5kZXJseWluZyBQSFAgY29kZSBvdXRzaWRlIG15c3FsaSAgdXNpbmcgdGhlIHJldHVy
biB2YWx1ZSBmcm9tIERCOmNvbm5lY3QsIG9yIHRoZSBwYXNzZWQgaW4gJGRzbi4gIFRoZSBmdW5j
dGlvbnMgYXJlIGFjY2Vzc2libGUsIGJ1dCBJIG5lZWQgdG8gcGFzcyBhIGNvbnRleHQsIGFuZCBJ
IGRvbuKAmXQgdGhpbmsgJGRzbiBnaXZlcyBtZSBhY2Nlc3MgdG8gdGhlIGNvbnRleHQuICBJdCBt
YXliZSB0b28gbGF0ZSBpbiB0aGUgc2VxdWVuY2Ugb2YgZXZlbnRzIHRvIGNoYW5nZSBhbnkgb2Yg
dGhhdC4gIEkgd2FzIHRoaW5raW5nIG9mIGRvaW5nIGEgY29udGV4dCBnZXQsIGFuZCBhIGNvbnRl
eHQgc2V0LCBpDQoNCkpvaG4gV3l0aGUNClNvZnR3YXJlICYgU3lzdGVtcyBFbmdpbmVlcg0KRXBp
Y29yIFNvZnR3YXJlIENvcnBvcmF0aW9uDQp3d3cuZXBpY29yLmNvbTxodHRwOi8vd3d3LmVwaWNv
ci5jb20vPg0KUGg6IDI1MC0yNjAtNjQ5NQ0KRS1NYWlsOiBqd3l0aGVAZXBpY29yLmNvbQ0KDQpG
cm9tOiBBeml6IFNhbGVoIDxheml6c2FsZWhAZ21haWwuY29tPg0KU2VudDogV2VkbmVzZGF5LCBN
YXJjaCAyMiwgMjAyMyA3OjM2IFBNDQpUbzogSm9obiBXeXRoZSA8Sld5dGhlQGVwaWNvci5jb20+
DQpDYzogcGhwLWRiQGxpc3RzLnBocC5uZXQNClN1YmplY3Q6IFJlOiBbUEhQLURCXSB3aGF0IGRv
ZXMgdGhlIG15c3FsaSByZWFsIGNvbm5lY3QgTVlTUUxJX0NMSUVOVF9TU0xfRE9OVF9WRVJJRllf
U0VSVkVSX0NFUlQgZmxhZyBkbz8gSG93IHRvIGRpc2FibGUgb25seSBDTiB2YWxpZGF0aW9uPw0K
DQpBVFRFTlRJT04NClRoaXMgZW1haWwgb3JpZ2luYXRlZCBvdXRzaWRlIG9mIEVwaWNvci4gUGxl
YXNlIGV4ZXJjaXNlIGNhdXRpb24gd2hlbiBjbGlja2luZyBsaW5rcywgb3BlbmluZyBhdHRhY2ht
ZW50cywgb3IgcmVzcG9uZGluZyB0byB0aGlzIGVtYWlsLg0KVGhhdCBmbGFnIHVzZXMgU1NMIGVu
Y3J5cHRpb24gYnV0IGRpc2FibGVzIHZhbGlkYXRpb24gb2YgdGhlIHByb3ZpZGVkIFNTTCBjZXJ0
aWZpY2F0ZS4gVGhpcyBpcyBvbmx5IGZvciBpbnN0YWxsYXRpb25zIHVzaW5nIE15U1FMIE5hdGl2
ZSBEcml2ZXIgYW5kIE15U1FMIDUuNiBvciBsYXRlci4NCg0KT24gV2VkLCBNYXIgMjIsIDIwMjMg
YXQgNDo1MOKAr1BNIEpvaG4gV3l0aGUgPEpXeXRoZUBlcGljb3IuY29tPG1haWx0bzpKV3l0aGVA
ZXBpY29yLmNvbT4+IHdyb3RlOg0KbXlzcWxpX3JlYWxfY29ubmVjdCBoYXMgYSBwYXJhbWV0ZXIg
Y2FsbGVkIGZsYWdzIHRoYW4gY2FuIGJlIHBhc3NlZCB0byBpdC4gIE9uZSBvZiB0aGUgZmxhZ3Mg
aW4gTVlTUUxJX0NMSUVOVF9TU0xfRE9OVF9WRVJJRllfU0VSVkVSX0NFUlQuDQoNCldoYXQgZG9l
cyB0aGlzIGZsYWcgZG8/ICBEb2VzIGl0IG9ubHkgZGlzYWJsZSB0aGUgQ04gdmFsaWRhdGlvbiwg
b3IgZG9lcyBpdCBhbHNvIGRpc2FibGUgdGhlIGNlcnRpZmljYXRlIHZhbGlkYXRpb24gYWdhaW5z
dCBhIENBIGF1dGhvcml0eS4NCg0KU1NMX0NPTkVYVCB0YWxrcyBhYm91dCBvcHRpb25zDQoNCnBl
ZXJfbmFtZQ0KcGVlcl92ZXJpZnkNCnBlZXJfdmVyaWZ5X25hbWUNCg0KSSB3b3VsZCBsaWtlIHRv
IHVzZSB0aGVzZSB0byBhdCBsZWFzdCBkaXNhYmxlIG9ubHkgdGhlIHZlcmlmeV9uYW1lIHBhcnQs
IG9yIG1heWJlIGV2ZW4gc2V0IHRoZSBwZWVyX25hbWUgYW5kIGhhdmUgYm90aCB2YWxpZGF0aW9u
cyB0dXJuZWQgb24uDQoNClNlZW1zIHRoaXMgY29udGV4dCBmdW5jdGlvbiBpcyBvbmx5IGF2YWls
YWJsZSBmb3Igc3RyZWFtcyBhbmQgbm90IG15c3FsaS4NCg0KT3BlbnNzbCBzZWVtcyB0byBoYXZl
IHRoZSBhYmlsaXR5IHRvIGRvIHRoaXMsIGhvd2V2ZXIgaXQgZG9lcyBub3QgYXBwZWFyIHRvIGJl
IGV4cG9zZWQgdmlhIG15c3FsaS4gIEkgYW0gZ3Vlc3NpbmcgdGhlIGZsYWcgYWJvdmUgZXF1YXRl
cyB0byBwZWVyIHZlcmlmeSBhbmQgbm90IHBlZXJfdmVyaWZ5X25hbWUsIG9yIGVxdWF0ZXMgdG8g
Ym90aC4NCg0KSSBzdXBwb3NlIEkgY291bGQgZG93bmxvYWQgdGhlIHNvdXJjZSBmb3IgcGhwX3Bt
eXNxbGksIGFuZCBoYXZlIGEgbG9vaywgd291bGQgdGhhdCBiZSB0aGUgY29ycmVjdCBwYWNrYWdl
IHRvIGxvb2sgYXQ/DQoNCg0KSm9obiBXeXRoZQ0KU29mdHdhcmUgJiBTeXN0ZW1zIEVuZ2luZWVy
DQpFcGljb3IgU29mdHdhcmUgQ29ycG9yYXRpb24NCnd3dy5lcGljb3IuY29tPGh0dHA6Ly93d3cu
ZXBpY29yLmNvbS8+DQpQaDogMjUwLTI2MC02NDk1DQpURiBTdXBwb3J0OiA4MDAtNjc4LTc0MjMN
CkUtTWFpbDogand5dGhlQGVwaWNvci5jb208bWFpbHRvOmp3eXRoZUBlcGljb3IuY29tPg0KU3Vw
cG9ydCBFLU1haWw6IFNpbGtTdXBwb3J0QGVwaWNvci5jb208bWFpbHRvOlNpbGtTdXBwb3J0QGVw
aWNvci5jb20+DQpTdXBwb3J0IHBvcnRhbDogaHR0cHM6Ly9lcGljb3Jjcy5zZXJ2aWNlLW5vdy5j
b20vZXBpY2NhcmUvDQo8aHR0cDovL3d3dy5lcGljb3IuY29tL3NlcnZpY2VzL2RlZmF1bHQuYXNw
eD4NCiA8aHR0cDovL3d3dy5lcGljb3IuY29tL3NlcnZpY2VzL2RlZmF1bHQuYXNweD4NCg==

--_000_SJ0PR18MB4012E611DDA652CF9231AFAFAA879SJ0PR18MB4012namp_--