Re: [VOTE] Improved TLS Defaults RFC
On 12 February 2014 13:19, Daniel Lowrey <[email protected]> wrote:
> Fair enough. Do we see value in exposing an
> OPENSSL_DEFAULT_STREAM_VERIFY_DEPTH constant to userland?
Not really. Applications needing to adjust this are likely to know
specifically what they need for their use case, they won't care what
the default is because they will be overriding it anyway i.e.
// You wouldn't bother with the check, you'd just set it
// to the value you require
if (OPENSSL_DEFAULT_STREAM_VERIFY_DEPTH < 12) {
stream_context_set_option($ctx, 'verify_depth', 12);
}
Thread (16 messages)