PHP SSL context options

SSL context options in PHP allow you to configure secure connections when using ssl:// and tls:// transports. These options control certificate verification, encryption settings, and connection security for secure network communications.

SSL Context Options

The following table lists all available SSL context options and their purposes ?

Example

This example demonstrates how to create a stream context with SSL options ?

<?php
$stream_context = stream_context_create([
    'ssl' => [
        'local_cert' => '/path/to/key.pem',
        'peer_fingerprint' => openssl_x509_fingerprint(file_get_contents('/path/to/key.crt')),
        'verify_peer' => false,
        'verify_peer_name' => false,
        'allow_self_signed' => true,
        'verify_depth' => 0
    ]
]);

// Use the context with a secure connection
$socket = stream_socket_client('tls://example.com:443', $errno, $errstr, 30, STREAM_CLIENT_CONNECT, $stream_context);
?>

Note: This example requires SSL certificates and network access. The paths should point to actual certificate files on your system.

Common Use Cases

SSL context options are typically used for ?

• Client certificates − When connecting to servers requiring client authentication
• Custom CA validation − For self-signed or corporate certificates
• Security hardening − Disabling weak ciphers or compression
• Development testing − Allowing self-signed certificates in test environments

Conclusion

SSL context options provide fine-grained control over secure connections in PHP. Use verify_peer and verify_peer_name for security, and allow_self_signed only in development environments.