Change openssl directives to PHP_INI_PERDIR

Because openssl.cafile and openssl.capath have implications for
security these directives have been changed to PHP_INI_PERDIR
(previously PHP_INI_ALL)

diff --git a/ext/openssl/openssl.c b/ext/openssl/openssl.c
index e649fca79573ceea55648dcca06c4f5f2bab400d..c5588f9d6f3aa0c4e9623f8e7b3d78b81f3c8a8b 100755 (executable)
--- a/ext/openssl/openssl.c
+++ b/ext/openssl/openssl.c
@@ -1099,8 +1099,8 @@ static const EVP_CIPHER * php_openssl_get_evp_cipher_from_algo(long algo) { /* {
 
 /* {{{ INI Settings */
 PHP_INI_BEGIN()
-       PHP_INI_ENTRY("openssl.cafile", NULL, PHP_INI_ALL, NULL)
-       PHP_INI_ENTRY("openssl.capath", NULL, PHP_INI_ALL, NULL)
+       PHP_INI_ENTRY("openssl.cafile", NULL, PHP_INI_PERDIR, NULL)
+       PHP_INI_ENTRY("openssl.capath", NULL, PHP_INI_PERDIR, NULL)
 PHP_INI_END()
 /* }}} */