PHP: Forcing ssl version about tls-update

[bluk]

The script for testing TLS 1.2 is updated for environments where TLS 1.2 is possible but not in the list of defaults. The Braintree issue will be addressed in the linked issue. The PayPal PHP library should use the equivalent of curl_setopt($ch, CURLOPT_SSLVERSION, 6); by default.

[braebot]

Can you please clarify? What was the error when you did not force the CURLOPT_SSLVERSION?

[riccardomessineo]

I'm using PHP, and I'm executing the command php -f TlsCheck.php after the creation of cacert.pem and TlsCheck.php

This is the output with your code:

string(17) "SSL connect error"
DEBUG INFORMATION:
###########
CURL VERSION:
{
    "version_number": 463623,
    "age": 3,
    "features": 1597,
    "ssl_version_number": 0,
    "version": "7.19.7",
    "host": "x86_64-redhat-linux-gnu",
    "ssl_version": "NSS\/3.21 Basic ECC",
    "libz_version": "1.2.3",
    "protocols": [
        "tftp",
        "ftp",
        "telnet",
        "dict",
        "ldap",
        "ldaps",
        "http",
        "file",
        "https",
        "ftps",
        "scp",
        "sftp"
    ]

This is the output with the option enabled:
PayPal_Connection_OK

[raknjak]

Related?
braintree/braintree_php#160