On Tue, Feb 4, 2014 at 6:58 AM, Sanford Whiteman
<[email protected]> wrote:
>> That being said, I would also suggest to stay on focus, this
>> discussion is getting off base, @sanford.
>
> Whatever, nothing else to add. Peer verification was voted in for 5.6
> knowing that Windows users would be SOL unless they availed themselves
> of a CA bundle (and openssl.cafile as INI_ALL). If they can't figure
> out how to get it they probably shouldn't be developing, it's true.
As I said earlier in this thread we have enough time to evaluate the
right solution.
We will try not to bundle the CA file until the 1st beta and see what
kind of issues testers are experiencing.
In any case, a script to fetch it from the curl site should be
provided, in the source and binaries releases. This script should be
documented in the PHP manual and in the upgrading guide (same for this
RFC in general).
Cheers,
--
Pierre
@pierrejoye | http://www.libgd.org