Just so everyone is clear: these notes do address a very real bug in the old `openssl_x509_parse()` function that can lead to memory corruption. I'm not suggesting they don't :)

I'm just suggesting that something like this can only cause problems if the certificates you trust inherently (and those your OS trusts in the case of most of these paths) are already compromised.

Adding version checks could basically only prevent you from using the file you otherwise use unless you have a *very* recent PHP version. In which case your only option would be to *disable* peer verification and this would lead to a much more significant security risk. This would definitely be a case of the medicine being worse than the disease.