[RESOLVED] Check for SSL

scrupul0us

I am trying to determine from a list of dedicated IP's on our server, which have an SSL installed (server is IIS)

I had originally thought I could simply:

<?php
$ip = '';

$fp = fsockopen("ssl://$ip", 443, $errno, $errstr, 5);
if (!$fp) {
    echo "No\n";
} else {
	echo "Yes\n";
}
?>

but for some reason, no matter what IP is used, they all come back true regardless if an SSL is installed in IIS and port 443 is assigned to it.

Any ideas?

scrupul0us

bump

rsmith

You're just telling it to see if $fp is there and has a value. You're not checking to see if the value is true or false.

johanafm

Well, unless he needs a type comparison for boolean true ($fp === true/false), then if $fp is the same as if $fp == true.

scrupul0us

If the connection isn't made it returns false and since the port isnt assigned i don't see why it's connecting

johanafm

scrupul0us;10929594 wrote:
$p = fsockopen("ssl://$ip", 443, $errno, $errstr, 5);

Port is assigned to 443. But I've no idea why you wouldn't get false if there really is no SSL on the target machine.

scrupul0us

Maybe I have to instead call out to it and see what the returned header response is?

I know that the only two cases I should run into are:

1) Not found
2) SSL isn't trusted since I'm calling via IP and not the FQDN on the SSL

Not sure how to implement/check that though

scrupul0us

so i did some poking around and I guess curl is a good fit for this... i found this snippet:

$ch = curl_init();
curl_setopt($ch, CURLOPT_URL, "https://$ip");
curl_setopt($ch, CURLOPT_HEADERFUNCTION, 'read_header');
curl_setopt($ch, CURLOPT_NOBODY, 1);
curl_exec($ch);

but when I print_r($ch) all I get is "Resource id #1"

I haven't worked alot with curl, but based on the examples on php.net I don't see what I'm doing wrong

Original Snippet:
http://stackoverflow.com/questions/1356640/fetch-http-response-header-redirect-status-with-php

scrupul0us

OK, I got it... I ended up using fsockopen as I found another snippet that help tremendously:

<?php

$domain = "ssl://$ip";
$portno = 443;
$method = "HEAD";
$url    = "/";

$http_response = "";
$http_request .= $method." ".$url ." HTTP/1.0\r\n";
$http_request .= "\r\n";

$fp = fsockopen($domain, $portno, $errno, $errstr);
if($fp){
    fputs($fp, $http_request);
	$http_response .= fgets($fp, 128)."\n";
    fclose($fp);
}
print $http_response; 
?>

Sites that have 443 assigned and an SSL installed return:

HTTP/1.1 200 OK

...where as sites that don't, return nothing; at least in this configuration,