Last modified: 2014-11-09 17:14:10 UTC

Wikimedia Bugzilla is closed!

Wikimedia migrated from Bugzilla to Phabricator. Bug reports are handled in Wikimedia Phabricator.
This static website is read-only and for historical purposes. It is not possible to log in and except for displaying bug reports and their history, links might be broken. See T70581, the corresponding Phabricator task for complete and up-to-date bug report information.
First Last Prev Next    This bug is not in your last search results.
Bug 68581 - Warning: file_get_contents(): Peer certificate CN=`*.wikipedia.org' did not match expected CN=`meta.wikimedia.org' in .../extensions/SpamBlacklist/BaseBlacklist.php on line 273
Warning: file_get_contents(): Peer certificate CN=`*.wikipedia.org' did not m...
Status: NEW
Product: MediaWiki extensions
Classification: Unclassified
Spam Blacklist (Other open bugs)
unspecified
All All
: Normal normal (vote)
: ---
Assigned To: Nobody - You can work on this!
:
Depends on:
Blocks:
  Show dependency tree / graph
 
Reported: 2014-07-25 18:00 UTC by Liangent
Modified: 2014-11-09 17:14 UTC (History)
1 user (show)

See Also:
Web browser: ---
Mobile Platform: ---
Assignee Huggle Beta Tester: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Description Liangent 2014-07-25 18:00:19 UTC 
Looks like a side effect of I3c3d397d5779aa0affcfa8455c2197ac562c5424
Comment 1 Seb35 2014-11-09 17:14:10 UTC 
This is the same error I have in bug 73199. Differences are:
* it is not the same code (SpamBlacklist vs MediaWiki core),
* it is not the same PHP function (file_get_contents vs fopen),
* in bug 73199, there is a context specified (not here).

I guess file_get_contents has a default context where the option CN_match is fixed to the requested host (I tried to dive into source code of PHP to track the default argument, but I abandonned), and new x509 certificates (like the one of the Wikimedia projects) don’t really use the CN attribute but the subjectAltName attribute.

If this diagnosis is correct, a fix would be to add a context parameter with CA_match "unset" (setting it to null?).
Note You need to log in before you can comment on or make changes to this bug.
First Last Prev Next    This bug is not in your last search results.

Navigation
Links