This is true for PHP < 5.6 ... As of 5.6 `ext/openssl` supports non-remote stream wrappers (e.g. phar://) when loading CA certs. This functionality was originally requested in [Bug #65538](https://bugs.php.net/bug.php?id=65538) and support for this feature is added in 5.6.