Updated Bugs and Breaking sections

Revert to ['verify'] instead of

Author: NicolaeIotu

CHANGELOG.md

@@ -1,5 +1,12 @@
 # Changelog
 
+## [v4.4.4](https://github.com/codeigniter4/CodeIgniter4/tree/v4.4.4) (Unreleased)
+[Full Changelog](https://github.com/codeigniter4/CodeIgniter4/compare/v4.4.3...v4.4.4)
+
+### Fixed Bugs
+
+* fix: [CURLRequest] skip hostname checks if options 'verify' false by @NicolaeIotu in https://github.com/codeigniter4/CodeIgniter4/pull/8258
+
 ## [v4.4.3](https://github.com/codeigniter4/CodeIgniter4/tree/v4.4.3) (2023-10-26)
 [Full Changelog](https://github.com/codeigniter4/CodeIgniter4/compare/v4.4.2...v4.4.3)
 

system/HTTP/CURLRequest.php

@@ -548,21 +548,19 @@ protected function setCURLOptions(array $curlOptions = [], array $config = [])
 
         // SSL Verification
         if (isset($config['verify'])) {
-            $configVerify = $config['verify'];
-
-            if (is_string($configVerify)) {
-                $file = realpath($configVerify) ?: $configVerify;
+            if (is_string($config['verify'])) {
+                $file = realpath($config['verify']) ?: $config['verify'];
 
                 if (! is_file($file)) {
-                    throw HTTPException::forInvalidSSLKey($configVerify);
+                    throw HTTPException::forInvalidSSLKey($config['verify']);
                 }
 
                 $curlOptions[CURLOPT_CAINFO]         = $file;
                 $curlOptions[CURLOPT_SSL_VERIFYPEER] = true;
                 $curlOptions[CURLOPT_SSL_VERIFYHOST] = 2;
-            } elseif (is_bool($configVerify)) {
-                $curlOptions[CURLOPT_SSL_VERIFYPEER] = $configVerify;
-                $curlOptions[CURLOPT_SSL_VERIFYHOST] = $configVerify ? 2 : 0;
+            } elseif (is_bool($config['verify'])) {
+                $curlOptions[CURLOPT_SSL_VERIFYPEER] = $config['verify'];
+                $curlOptions[CURLOPT_SSL_VERIFYHOST] = $config['verify'] ? 2 : 0;
             }
         }
 

user_guide_src/source/changelogs/v4.4.4.rst

@@ -27,6 +27,12 @@ Validation rules matches and differs
 Bugs have been fixed in the case where ``matches`` and ``differs`` in the Strict
 and Traditional rules validate data of non-string types.
 
+CURLRequest option 'ssl_key' eliminated
+====================================
+
+CURLRequest option 'ssl_key' was eliminated.
+Please use CURLRequest option 'verify' to indicate the path to a CA bundle.
+
 ***************
 Message Changes
 ***************