Jan Dembowski on "WordPress and SSL Version"

ساخت وبلاگ

Good day all.

We are currently running a MultiNetwork / Multisite installation. Initially we had only the logon/admin area covered by SSL, but have upgraded that to include all traffic.

Over the last few months I've been tracking down issues with a variety of WordPress operations and plugin issues that all seemed to refer to SSL connection errors.

Some of the issues we've seen included:
anytime we did a network upgrade after WP upgrade we would see SSL connection errors on sites
Trying to use RSS feeds, we would get SSL connection errors trying to connect and pull in data
etc

We are self hosted and maintain our CA through InCommon. Our security department is pretty diligent and when setting up our SSL environment, required us to only accept tlsv1.2 because of the known vulnerabilities in SSLv1-3 and TLSv1.0 & 1.1.

Through testing, I've found that if I lower the SSL environment to SSL V2 or 3, everything begins to work correctly in WordPress. Additionally if i go to the command line and execute curl -v https://xyz.my.site.com I will get an SSL error, but if I execute curl -v https://xyz.my.site.com -tlsv1.2 connection works fine. Unfortunately, I cannot leave this setting.

My question; Is there any way to set php/CURL to use tls1.2 automatically in WP??

Any thoughts would be appreciated.

WordPress ...
ما را در سایت WordPress دنبال می کنید

برچسب : نویسنده : استخدام کار wpss بازدید : 265 تاريخ : يکشنبه 13 تير 1395 ساعت: 7:41