Basically all options one can pass to the HTTP_Request2 constructor should be configurable, including

• adapter
• ssl_cafile
• ssl_capath
• ssl_local_cert
• timeout
• connect_timeout

The options could be set as a hash value in the payment provider config section:

[payment "paypal"]
provider = paypal
...
httpopts = { ssl_verify_peer=1, ssl_verify_host=1 }

In T221#2797, @bruederli wrote:

Basically all options one can pass to the HTTP_Request2 constructor should be configurable, including

You mean, they should already be configurable (current codebase?).

If so, @grote, this becomes an ops item (different Phabricator via @petersen for the moment).

In T221#5523, @vanmeeuwen wrote:

In T221#2797, @bruederli wrote:

Basically all options one can pass to the HTTP_Request2 constructor should be configurable, including

You mean, they should already be configurable (current codebase?).

Nope, this should read "shall be configurable" after the small implementation work this ticket is intended for.