sockets context question

gaucho

Hello all,
hope somebody can help me on this one.
I need to code a simple ftp client over SSL. Authentication has two components:
- a user certificate
- USER/PASS data

Normally the client passes the certificate at connection time.
When using fopen to open a file or an url you can create a ressource context to pass a specific certificate. But fopen is generally used for one specific file.
fsockopen or ftp_connect don't seem to support passing such contexts, or am I missing something.

My question is how can I pass a specific certificate (when required) to the server using fsockopen or similar.

Thanks in advance

gaucho

MarkR

Look at

http://www.php.net/manual/en/transports.php#transports.inet

For FTPS and HTTPS connections, using fopen(), you can use local_cert in the context to point to the PEM-encoded file containing the client certificate.

EDIT: I noticed you've already mentioned this:

Is there any reason why you can's use the fopen() etc, functions (To scan a directory you can use opendir() which also supports contexts)
If you really want to code a FTPS client, you can probably do it using stream_socket_client (which takes a context) rather the fsockopen

Mark

gaucho

Hello Mark,
thanks for your reply.
stream_socket_client is OK, the problem is that not everybody is using PHP5, many are still going with PHP4, this is why I didn't consider this one to be my solution.
Liek I said, I'm trying to build like a small ftp client. Well, it does not have to do much, just upload a file. fopen will not work, I think, because in ftp you have to pass some commands to perform the tasks of logging in, optionally going into passive mode, maybe change directory and uploading the file. And each time you have to wait for socket response.

Any other ideas?

Thanks again

gaucho

P.S: I've already seen the transports page, it just states taht you can use verify_cert, etc with functions like fopen, fsockopen, etc, but doesn't show how (at least in the case of fsockopen).

MarkR

You should be able to do what you need to do with fopen() - it can certainly go into passive mode if required, and you can avoid needing to change directory by specifying a full path for the upload.

Personally I wouldn't bother even trying to make an application work with PHP4 AND PHP5. It's going to create a maintenance nightmare - you'll need two versions of PHP on your dev server, all testing needs to be done twice etc.

Tell the client / manager how much extra it costs to support PHP4, and they will quickly drop the requirement, I expect.

Mark

gaucho

Hello Mark,

I'm trying to find a global solution BECAUSE it should be for PHP4 and 5.
Would be nice if it would work with fopen.

I'll give it a try and tell you what happened.

Regards

gaucho

Hello Mark,
gave fopen a short try, seems to work, at least it uploads the file. But it seems not to use the context parameters for ssl. I think I'll have to reconfig my ftp-server to only accept ssl connections to go on testing that.

Best regards

gaucho

MarkR

If you use ftps:// then it should definitely use SSL. Use a network analyser to inspect the connection - you should be able to see the certificate exchange (although not the data as that will be encrypted) - as certificates are (I think) sent in the clear.

Mark