Curl access https and CA certificate in php (code example)

The content of this article is about curl accessing https and CA certificates (code examples) in PHP. It has certain reference value. Friends in need can refer to it. I hope it will be helpful to you.

CA certificate is used to verify whether the other website is a certificate issued by the CA when calling HTTPS resources, rather than a certificate generated by oneself

curl command
1. Need to download the CA The certificate file address is http://curl.haxx.se/ca/cacert.pem
2. Put the downloaded file in this location/etc/pki/tls/certs/ca-bundle.crt
3 .curl can access https resources

php code

function post($url, $data=array(), $refer = "", $timeout = 30, $header = array()){ $curlObj = curl_init(); $ssl = stripos($url,'https://') === 0 ? true : false; $options = array( CURLOPT_URL => $url, CURLOPT_RETURNTRANSFER => 1, CURLOPT_POST => 1, CURLOPT_POSTFIELDS => $data, CURLOPT_FOLLOWLOCATION => 1, CURLOPT_AUTOREFERER => 1, CURLOPT_USERAGENT => 'Webface SelfService Form', CURLOPT_TIMEOUT => $timeout, CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_0, CURLOPT_IPRESOLVE => CURL_IPRESOLVE_V4, CURLOPT_REFERER => $refer ); if (!empty($header)) { $options[CURLOPT_HTTPHEADER] = $header; } if ($refer) { $options[CURLOPT_REFERER] = $refer; } if ($ssl) { //注意看这里就是配置CA证书 //只信任CA颁布的证书 $options[CURLOPT_SSL_VERIFYPEER]=true; //本地CA证书,用来验证网站的证书是否是CA颁布的 $options[CURLOPT_CAINFO]=getcwd() . '/cacert.pem'; //验证域名是否匹配 $options[CURLOPT_SSL_VERIFYHOST] = 2; /* //忽略证书验证,信任任何证书 $options[CURLOPT_SSL_VERIFYHOST] = false; $options[CURLOPT_SSL_VERIFYPEER] = false; */ } curl_setopt_array($curlObj, $options); $returnData = curl_exec($curlObj); if (curl_errno($curlObj)) { $returnData = curl_error($curlObj); } curl_close($curlObj); return $returnData; } $res=post("https://www.baidu.com"); var_dump($res);

The above is the detailed content of Curl access https and CA certificate in php (code example). For more information, please follow other related articles on the PHP Chinese website!