facebook/phabricator — Issue #98: Add support for self-signed SSL certificates
Author: killermonk
Created: 2012-03-06 17:36:57+00:00
State: open

Currently if you protocol for phabricator is HTTPS libphutil forces verification of the ssl peer during API calls. This is not configurable.

Forcing verification of the ssl peer prevents users from being able to use a self-signed certificate, so they either must get a certificate issued by a CA or use HTTP.

Some small shops, aka individuals, aka myself, want to use HTTPS but don't want to have to purchase an SSL certificate from a CA. The code as it currently stands, doesn't allow for this situation.

Personally, I feel that defaulting to verifying the peer is the best option, but if the user wants, they should be allowed to disable this verification on a per-config basis.

libphutil:src/future/http/https/HTTPSFuture.php line 96 is where the option is set, I propose this be changed to a config variable.

I don't know what kind of effect this would have on performance, though.