PHP fails when using multi-domain certificates

Path	csiph.com!v102.xanadu-bbs.net!xanadu-bbs.net!feeder.erje.net!eu.feeder.erje.net!fu-berlin.de!uni-berlin.de!individual.net!not-for-mail
From	Justus Hoffmann <j-hoffmann@gmx.net>
Newsgroups	comp.lang.php
Subject	PHP fails when using multi-domain certificates
Date	Tue, 26 Aug 2014 11:21:18 +0200
Lines	20
Message-ID	<c631sfFpifqU1@mid.individual.net> (permalink)
Mime-Version	1.0
Content-Type	text/plain
X-Trace	individual.net dQjOQQ/Tho26tmM5dwRreA3GSUMhwkYCANz80I304hnDwUGEMx
Cancel-Lock	sha1:BXfw+SWt8/lzb40Ro/X73JGIsTA=
User-Agent	Web-News v.1.6.4 (by Terence Yim)
Xref	csiph.com comp.lang.php:14195

Show key headers only | View raw

Hi everyone,

I am trying to access an IMAP account via a PHP script using SSL:

$srv = '{mail.myhost.com:993/imap/ssl}';
$x=imap_open($srv, $user, $pass);

The certificate check fails, although the certificate itself is valid:

Certificate failure for mail.myhost.com: Unable to locate common name in
certificate: /OU=Domain Control Validated/OU=PositiveSSL Multi-Domain

It *does* work, when I add the option "novalidate-cert", however this would allow man-in-the-middle attacks since the script would accept any certificate.

I think the problem is, that the mail hoster uses a "multi-domain" certificate. Co-workers tell me, that PHP cannot handle this problem.

Is that correct? Do I really have to use the "novalidate-cert" option?

Thank you very much,
Justus

Back to comp.lang.php | Previous | Next — Next in thread | Find similar | Unroll thread

Thread

PHP fails when using multi-domain certificates Justus Hoffmann <j-hoffmann@gmx.net> - 2014-08-26 11:21 +0200
  Re: PHP fails when using multi-domain certificates Jerry Stuckle <jstucklex@attglobal.net> - 2014-08-26 07:38 -0400
  Re: PHP fails when using multi-domain certificates Arno Welzel <usenet@arnowelzel.de> - 2014-08-26 17:54 +0200

csiph-web