StreamTransport does not verify SSL certificates

[cebe]

What steps will reproduce the problem?

yii2-httpclient/src/StreamTransport.php

Lines 41 to 43 in 3fc9b07

	'ssl' => [
	'verify_peer' => false,
	],

What's expected?

This value should be configurable via a property and the default should be true instead of false.

Additional info

Q	A
Yii version	not relevant
Yii HTTP Client version	all
PHP version	not relevant
Operating system	all

[schmunk42]

Do you mean a standalone property? Because isn't it configurable via options, see here?

I agree about the security implications, but it also might break several exisiting apps.

[cebe]

Because isn't it configurable via options, see here?

good point, did not notice it was configurable like that.

It is "only" a bad default then.

[samdark]

Yes, default should be adjusted. No need to add a dedicated property though.