From e7a9bd336229122792cbbd3fd078b8af174611de Mon Sep 17 00:00:00 2001 From: Jordi Boggiano Date: Tue, 7 Aug 2018 08:11:10 +0200 Subject: [PATCH 1/2] Attempt workaround for repo.packagist.org domain SSL on very old PHP, fixes #7530 --- src/Composer/Util/RemoteFilesystem.php | 3 +++ 1 file changed, 3 insertions(+) diff --git a/src/Composer/Util/RemoteFilesystem.php b/src/Composer/Util/RemoteFilesystem.php index dc570ecf3..ee18ad62d 100644 --- a/src/Composer/Util/RemoteFilesystem.php +++ b/src/Composer/Util/RemoteFilesystem.php @@ -761,6 +761,9 @@ class RemoteFilesystem $tlsOptions['ssl']['CN_match'] = $certMap['cn']; $tlsOptions['ssl']['peer_fingerprint'] = $certMap['fp']; + } elseif (!CaBundle::isOpensslParseSafe() && $host === 'repo.packagist.org') { + // handle subjectAltName for packagist.org's repo domain on very old PHPs + $tlsOptions['ssl']['CN_match'] = 'packagist.org'; } } From 9e7d48f70edd4afa51c8495afc4ae5be77a9acdf Mon Sep 17 00:00:00 2001 From: Jordi Boggiano Date: Tue, 7 Aug 2018 09:38:26 +0200 Subject: [PATCH 2/2] Update changelog --- CHANGELOG.md | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index fb63f0868..6200d2123 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,3 +1,8 @@ +### [1.7.1] 2018-08-07 + + * Fixed issue autoloading plugins in require-dev in some conditions + * Fixed handling of SSL to repo.packagist.org on very old PHP versions + ### [1.7.0] 2018-08-03 * Added the overridden platform config's PHP version in the `diagnose` command output @@ -674,7 +679,8 @@ * Initial release -[1.7.0]: https://github.com/composer/composer/compare/1.7.0...1.7.0 +[1.7.1]: https://github.com/composer/composer/compare/1.7.0...1.7.1 +[1.7.0]: https://github.com/composer/composer/compare/1.7.0-RC...1.7.0 [1.7.0-RC]: https://github.com/composer/composer/compare/1.6.5...1.7.0-RC [1.6.5]: https://github.com/composer/composer/compare/1.6.4...1.6.5 [1.6.4]: https://github.com/composer/composer/compare/1.6.3...1.6.4