[TYPO3-core] RFC: Bug #11932: OpenID login does uses cURL even if was not defined in TYPO3_CONF_VARS

Oliver Hader oliver at typo3.org
Fri Oct 9 14:49:04 CEST 2009


This is an SVN patch request.

Type: Bugfix

Bugtracker references:
http://bugs.typo3.org/view.php?id=11932

Branch: Trunk

Problem:
The 3rd party library used for the system extension openid offers some
HTTP-Fetchers to execute requests to an OpenID provider. However, if
curl_init() ist available on the webserver, it is used without
considering the setting in $GLOBALS['TYPO3_CONF_VARS']['SYS']['curlUse'].

I realized that problem by using an OpenID starting with 'https://' and
having a cURL version without HTTPS support and the disabled curlUse
setting - the result was, that I could not login to the backend anymore
with that OpenID.

Solution:
The OpenID library provides a constant 'Auth_Yadis_CURL_OVERRIDE' which
disables the disposal of cURL.

olly
-- 
Oliver Hader
TYPO3 Release Manager 4.3


More information about the TYPO3-team-core mailing list