Tickets :: Comment on [#13730] Implementation of peer verification in TLS connections

* Your Email Address
* Spam protection	Enter the letters below: .___. . __ __..__. [__ \| \|/ `(__ \| \| [___\|__\|\__..__)\|__\|
Comment	> I updated my patch to use the context parameter. The patch works > mainly the same way it does before. However, the logic to create the > context array was moved to /imp/lib/Imap.php. > > The pinning of a certificate by its fingerprint cannot be done with > the context parameter of Socket/Client, because the server > certificate is not availabe when the connection is established. It > becomes availabe when the starttls command is sent. Therefore I added > the items "sha1", "md5" and "sha256" to the array $params in > Client.php. These will be used to check the certificate fingerprints > during TLS handshake.
Attachment
Watch this ticket