added "cafile" option

jsteemann · jsteemann · commit f69175ffbd48 · 2019-08-09T17:29:31.000+02:00
diff --git a/lib/ArangoDBClient/ConnectionOptions.php b/lib/ArangoDBClient/ConnectionOptions.php
@@ -99,6 +99,11 @@ class ConnectionOptions implements \ArrayAccess
      * "allow self-signed" index constant
      */
     const OPTION_ALLOW_SELF_SIGNED = 'allowSelfSigned';
+    
+    /**
+     * "caFile" index constant
+     */
+    const OPTION_CA_FILE = 'caFile';
 
     /**
      * ciphers allowed to be used in SSL
@@ -460,6 +465,7 @@ private static function getDefaults()
             self::OPTION_VERIFY_CERT             => DefaultValues::DEFAULT_VERIFY_CERT,
             self::OPTION_VERIFY_CERT_NAME        => DefaultValues::DEFAULT_VERIFY_CERT_NAME,
             self::OPTION_ALLOW_SELF_SIGNED       => DefaultValues::DEFAULT_ALLOW_SELF_SIGNED,
+            self::OPTION_CA_FILE                 => null,
             self::OPTION_CIPHERS                 => DefaultValues::DEFAULT_CIPHERS,
             self::OPTION_AUTH_USER               => null,
             self::OPTION_AUTH_PASSWD             => null,
diff --git a/lib/ArangoDBClient/HttpHelper.php b/lib/ArangoDBClient/HttpHelper.php
@@ -89,6 +89,10 @@ public static function createConnection(ConnectionOptions $options)
             stream_context_set_option($context, 'ssl', 'verify_peer', $options[ConnectionOptions::OPTION_VERIFY_CERT]);
             @stream_context_set_option($context, 'ssl', 'verify_peer_name', $options[ConnectionOptions::OPTION_VERIFY_CERT_NAME]);
             stream_context_set_option($context, 'ssl', 'allow_self_signed', $options[ConnectionOptions::OPTION_ALLOW_SELF_SIGNED]);
+            
+            if (is_string(@$options[ConnectionOptions::OPTION_CA_FILE])) {
+                stream_context_set_option($context, 'ssl', 'cafile', $options[ConnectionOptions::OPTION_CA_FILE]);
+            }
 
             if ($options[ConnectionOptions::OPTION_CIPHERS] !== null) {
                 // SSL ciphers
