SSL context options

SSL context option listing

Context options for ssl:// and tls:// transports.

Changelog:

5.6.0

Added peer_fingerprint and verify_peer_name. verify_peer default changed to TRUE.

5.4.13

Added disable_compression. Requires OpenSSL >= 1.0.0.

5.3.2

Added SNI_enabled and SNI_server_name.

5.0.0

Added capture_peer_cert, capture_peer_chain, ciphers and local_pk.

Notes:

Because ssl:// is the underlying transport for the https:// and ftps:// wrappers, any context options which apply to ssl:// also apply to https:// and ftps://.

For SNI (Server Name Indication) to be available, then PHP must be compiled with OpenSSL 0.9.8j or greater. Use the OPENSSL_TLSEXT_SERVER_NAME to determine whether SNI is supported.