php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login
Bug #45308 SoapClient() does not use the https cert to fetch the wsdl file
Submitted: 2008-06-19 02:22 UTC Modified: 2009-05-06 01:00 UTC
Votes:1
Avg. Score:5.0 ± 0.0
Reproduced:1 of 1 (100.0%)
Same Version:0 (0.0%)
Same OS:1 (100.0%)
From: edman007 at edman007 dot com Assigned:
Status: No Feedback Package: SOAP related
PHP Version: 5.2.6 OS: Linux
Private report: No CVE-ID: None
Welcome back! If you're the original bug submitter, here's where you can edit the bug or add additional notes.
If you forgot your password, you can retrieve your password here.
Password:
Status:
Package:
Bug Type:
Summary:
From: edman007 at edman007 dot com
New email:
PHP Version: OS:

 

 [2008-06-19 02:22 UTC] edman007 at edman007 dot com
Description:
------------
when using the local_cert/passphrase options to soapclient() soapclient will not use the https cert specified with local_cert to connect to the server that contains the wsdl file (it will however use it when making the actual soap request). I understand that this may not always be needed, but their should be no reason that a wsdl file need to be public, so maybe there could be an option to use the local_cert/passphrase when fetching the wsdl (and automatically disable wsdl cache for those urls if need be [not sure if you guys consider that a security issue])

Reproduce code:
---------------
$mailer = new SoapClient(EMAIL_ACCESS_URL, array('classmap', $wsdl_classmap, 'local_cert' => EMAIL_HTTPS_CERT,'passphrase' => EMAIL_CERT_PASS));


Expected result:
----------------
not throw an error

Actual result:
--------------
throws error saying it cannot parse the wsdl...which is very misleading, it mentions about errors fetching the file

Note: It can be worked around by fetching it with curl and writing to a temp file and using that to construct the SoapClient() object

Patches

Pull Requests

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2009-04-28 18:43 UTC] jani@php.net
Please try using this CVS snapshot:

  http://snaps.php.net/php5.2-latest.tar.gz
 
For Windows:

  http://windows.php.net/snapshots/


 [2009-05-06 01:00 UTC] php-bugs at lists dot php dot net
No feedback was provided for this bug for over a week, so it is
being suspended automatically. If you are able to provide the
information that was originally requested, please do so and change
the status of the bug back to "Open".
 
PHP Copyright © 2001-2025 The PHP Group
All rights reserved.
Last updated: Thu Jul 03 08:01:34 2025 UTC