Changeset 25956 for trunk/src/wp-admin/includes/update.php

Timestamp:

10/27/2013 09:08:25 PM (11 years ago)

Author:

nacin

Message:

When an HTTPS request to api.wordpress.org fails, try an insecure HTTP request and issue a warning.

Certain versions of cURL appear to claim OpenSSL support but fail to work. We need to not trap users on older versions while we work this out, and instead fall back to an insecure request.

see #25716 for trunk.

File:

• trunk/src/wp-admin/includes/update.php (modified) (2 diffs)

trunk/src/wp-admin/includes/update.php

@@ -104 +104 @@
     $return = array();
 
-    $url = 'http://api.wordpress.org/core/checksums/1.0/?' . http_build_query( compact( 'version', 'locale' ), null, '&' );
-
-    if ( wp_http_supports( array( 'ssl' ) ) )
+    $url = $http_url = 'http://api.wordpress.org/core/checksums/1.0/?' . http_build_query( compact( 'version', 'locale' ), null, '&' );
+
+    if ( $ssl = wp_http_supports( array( 'ssl' ) ) )
         $url = set_url_scheme( $url, 'https' );
 
@@ -114 +114 @@
 
     $response = wp_remote_get( $url, $options );
+    if ( $ssl && is_wp_error( $response ) ) {
+        trigger_error( __( 'An unexpected error occurred. Something may be wrong with WordPress.org or this server&#8217;s configuration. If you continue to have problems, please try the <a href="http://wordpress.org/support/">support forums</a>.' ) . ' ' . '(WordPress could not establish a secure connection to WordPress.org. Please contact your server administrator.)', headers_sent() || WP_DEBUG ? E_USER_WARNING : E_USER_NOTICE );
+        $response = wp_remote_get( $http_url, $options );
+    }
 
     if ( is_wp_error( $response ) || 200 != wp_remote_retrieve_response_code( $response ) )