[TYPO3-core] RFC: Bug #11932: OpenID login does uses cURL even if was not defined in TYPO3_CONF_VARS

[Susanne Moog]

Oliver Hader schrieb:
> This is an SVN patch request.
> 
> Type: Bugfix
> 
> Bugtracker references:
> http://bugs.typo3.org/view.php?id=11932
> 
> Branch: Trunk
> 
> Problem:
> The 3rd party library used for the system extension openid offers some
> HTTP-Fetchers to execute requests to an OpenID provider. However, if
> curl_init() ist available on the webserver, it is used without
> considering the setting in $GLOBALS['TYPO3_CONF_VARS']['SYS']['curlUse'].
> 
> I realized that problem by using an OpenID starting with 'https://' and
> having a cURL version without HTTPS support and the disabled curlUse
> setting - the result was, that I could not login to the backend anymore
> with that OpenID.
> 
> Solution:
> The OpenID library provides a constant 'Auth_Yadis_CURL_OVERRIDE' which
> disables the disposal of cURL.

+1 by reading.

Greetz,

Susanne

-- 
Susanne Moog
NEUSTA GmbH - www.neusta.de