From cc048370fc31dc52d9cfbdb59290deea8bbe21f6 Mon Sep 17 00:00:00 2001 From: Lars Strojny Date: Fri, 20 Nov 2015 13:04:03 +0100 Subject: [PATCH] =?UTF-8?q?Make=20sure=20SSL=20certificates=20are=20actual?= =?UTF-8?q?ly=20validated=20and=20your=20receipt=20validation=20can?= =?UTF-8?q?=E2=80=99t=20be=20easily=20MITMed?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- src/ReceiptValidator/iTunes/Validator.php | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/src/ReceiptValidator/iTunes/Validator.php b/src/ReceiptValidator/iTunes/Validator.php index 55a28e6..cb2fc2e 100755 --- a/src/ReceiptValidator/iTunes/Validator.php +++ b/src/ReceiptValidator/iTunes/Validator.php @@ -167,7 +167,7 @@ public function validate($receiptData = null, $iStoreSharedSecret = null) $this->setIStoreSharedSecret($iStoreSharedSecret); } - $httpResponse = $this->getClient()->post(null, null, $this->encodeRequest(), array('verify' => false))->send(); + $httpResponse = $this->getClient()->post(null, null, $this->encodeRequest())->send(); if ($httpResponse->getStatusCode() != 200) { throw new RunTimeException('Unable to get response from itunes server'); @@ -180,7 +180,7 @@ public function validate($receiptData = null, $iStoreSharedSecret = null) if ($this->_endpoint == self::ENDPOINT_PRODUCTION && $response->getResultCode() == Response::RESULT_SANDBOX_RECEIPT_SENT_TO_PRODUCTION) { $client = new GuzzleClient(self::ENDPOINT_SANDBOX); - $httpResponse = $client->post(null, null, $this->encodeRequest(), array('verify' => false))->send(); + $httpResponse = $client->post(null, null, $this->encodeRequest())->send(); if ($httpResponse->getStatusCode() != 200) { throw new RunTimeException('Unable to get response from itunes server');