Option to disable guzzle SSL certificate verification

Created on 4 October 2021, over 3 years ago
Updated 4 January 2025, 4 days ago

Problem/Motivation

I found the ability to disable SSL certificates useful especially during development but until now I was happy to just patch my local copy.

However, resulting from the Let’s Encrypt DST Root CA X3 certificate expiration on September 30 2021 many APIs are likely to come across this issue and I think it will be good to add this feature.
for more details:
https://letsencrypt.org/docs/dst-root-ca-x3-expiration-september-2021/

If anyone knows of another solution to this problem that does not involve disabling SSL checking that would be preferable although I see no harm in adding the ability to disable checking.
Will post a patch.

Steps to reproduce

Connect to a server with Let’s Encrypt serving both new and old root certificates (default config)

Proposed resolution

Allow setting in settings.php

<?php
$conf['s3fs_SSL_VERIFY'] = FALSE;
?>

User interface changes

Probably best not to expose this in the UI.

Feature request
Status

Closed: outdated

Version

2.0

Component

Code

Created by

🇬🇧United Kingdom guy_schneerson

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Comments & Activities

Not all content is available!

It's likely this issue predates Contrib.social: some issue and comment data are missing.

  • 🇺🇸United States cmlara

    Drupal 7 end-of-life triage:
    Drupal 7 will reach end of life on January 5th.

    The 7.x branches of S3FS do not have any additional planned releases.

    The requests in this issue do not appear to exist in the 8.x-3.x and newer branches.

Production build 0.71.5 2024