search

smallstep / hello-mtls

:wave: Docs demonstrating mutual TLS configurations in various technologies
Apache License 2.0
97 stars 26 forks source link

PHP (server and client) #21

Closed alanchrt closed 5 years ago

alanchrt commented 5 years ago

This could be split into multiples. Not sure what popular options are... Laravel, Symfony, ??? Or maybe TLS just terminates at the Apache/nginx web server for PHP, not sure whether they encourage running your own pure PHP server and reverse proxying these days.

alanchrt commented 5 years ago

@sourishkrout Here's another example where PHP doesn't seem to offer native support, but most recommendations point to Nginx or Apache.

sourishkrout commented 5 years ago

I've asked my friend who's a PHP guy to help shed light on this...

alanchrt commented 5 years ago

When I left PHP world, they used fastcgi with Apache or Nginx to run it usually. I'm not sure if they've moved to the model of so many other languages, where they bind a port themselves, then optionally use a reverse proxy. If so, TLS termination might make sense on that layer.

From a quick glance around the web, it seems like it's still fastcgi, and they now have a standalone server but only recommend it in development.

alanchrt commented 5 years ago

Regardless, we should write PHP client docs!