{"action":"created","issue":{"url":"https://api.github.com/repos/guzzle/guzzle3/issues/71","labels_url":"https://api.github.com/repos/guzzle/guzzle3/issues/71/labels{/name}","comments_url":"https://api.github.com/repos/guzzle/guzzle3/issues/71/comments","events_url":"https://api.github.com/repos/guzzle/guzzle3/issues/71/events","html_url":"https://github.com/guzzle/guzzle3/issues/71","id":122065433,"number":71,"title":"security issue present in many clis","user":{"login":"cordoval","id":328359,"avatar_url":"https://avatars.githubusercontent.com/u/328359?v=3","gravatar_id":"","url":"https://api.github.com/users/cordoval","html_url":"https://github.com/cordoval","followers_url":"https://api.github.com/users/cordoval/followers","following_url":"https://api.github.com/users/cordoval/following{/other_user}","gists_url":"https://api.github.com/users/cordoval/gists{/gist_id}","starred_url":"https://api.github.com/users/cordoval/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/cordoval/subscriptions","organizations_url":"https://api.github.com/users/cordoval/orgs","repos_url":"https://api.github.com/users/cordoval/repos","events_url":"https://api.github.com/users/cordoval/events{/privacy}","received_events_url":"https://api.github.com/users/cordoval/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":1,"created_at":"2015-12-14T15:28:42Z","updated_at":"2015-12-17T10:33:24Z","closed_at":null,"body":"There is a concern that was raised about copying the .pem in /tmp folder world writable\r\n\r\nhttps://github.com/gushphp/gush/issues/531\r\n\r\nThis has to do with the cert.pem copied that many https://github.com/search?q=guzzle-cacert.pem&type=Code&utf8=%E2%9C%93 repos do. Is there a work around for this?"},"comment":{"url":"https://api.github.com/repos/guzzle/guzzle3/issues/comments/165413508","html_url":"https://github.com/guzzle/guzzle3/issues/71#issuecomment-165413508","issue_url":"https://api.github.com/repos/guzzle/guzzle3/issues/71","id":165413508,"user":{"login":"glensc","id":199095,"avatar_url":"https://avatars.githubusercontent.com/u/199095?v=3","gravatar_id":"","url":"https://api.github.com/users/glensc","html_url":"https://github.com/glensc","followers_url":"https://api.github.com/users/glensc/followers","following_url":"https://api.github.com/users/glensc/following{/other_user}","gists_url":"https://api.github.com/users/glensc/gists{/gist_id}","starred_url":"https://api.github.com/users/glensc/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/glensc/subscriptions","organizations_url":"https://api.github.com/users/glensc/orgs","repos_url":"https://api.github.com/users/glensc/repos","events_url":"https://api.github.com/users/glensc/events{/privacy}","received_events_url":"https://api.github.com/users/glensc/received_events","type":"User","site_admin":false},"created_at":"2015-12-17T10:33:24Z","updated_at":"2015-12-17T10:33:24Z","body":"php should be able to read cert from phar file using stream wrappers, why does it need to be copied outside phar? besides, most linux distros ship their own system ca-certificates which is kept up to date os update mechanisms\r\n\r\n  - https://packages.debian.org/sid/ca-certificates\r\n  - https://github.com/openSUSE/ca-certificates\r\n  - https://launchpad.net/ubuntu/+source/ca-certificates\r\n  - https://fedoraproject.org/wiki/CA-Certificates\r\n"}}