Welcome Guest. Please Login or Register  


You are here: Index > Virtualizor - Virtual Server Control Panel > General Support > Topic : Disabling full SSL on API requests



Normal Mode | Print  

 Disabling full SSL on API requests (5 Replies, Read 5036 times)
Keage
Group: Member
Post Group: Newbie
Posts: 44
Status:
Hi

Why does the API Client, Blesta module and presumably WHMCS module contain this cURL configuration for API calls?

PHP Code

 // Turn off the server and peer verification (TrustManager Concept).
curl_setopt($chCURLOPT_SSL_VERIFYPEERFALSE);
curl_setopt($chCURLOPT_SSL_VERIFYHOSTFALSE); 



This is surely very insecure for something so important?

I have Googled it but only found references to some PayPal sample code...

Thanks
IP: --   


Threads
 Keage   Disabling full SSL on API requests (5 Replies, Read 5036 times)
    |--  Keage   Bump.   on July 29, 2016, 8:29 am
    |--  asim_shaikh   Hi Why does...   on July 30, 2016, 4:50 am
    |--  Keage   Right, thanks, so...   on July 30, 2016, 7:41 pm
    |--  Keage   Bump... SSL certs...   on August 11, 2016, 10:39 pm
    |--  Keage   Bump... disabling SSL...   on August 24, 2016, 7:27 pm

« Previous    Next »

Normal Mode | Print  



Users viewing this topic
1 guests, 0 users.


All times are GMT. The time now is April 27, 2024, 8:53 pm.

  Powered By AEF 1.0.8 © 2007-2008 Electron Inc.Queries: 11  |  Page Created In:0.025