Merge pull request #37 from cburschka-pwc/pr/37-ignore-ssl-errors

Only ignore SSL errors if the setting is active.

Author: wizardist

src/Client.php

@@ -1104,8 +1104,12 @@ public function getSoapResponse( $soapUrl, $content, $throwException = true ) {
         curl_setopt( $cURLHandle, CURLOPT_URL, $soapUrl );
         curl_setopt( $cURLHandle, CURLOPT_RETURNTRANSFER, 1 );
         curl_setopt( $cURLHandle, CURLOPT_TIMEOUT, self::$connectorTimeout );
-        curl_setopt( $cURLHandle, CURLOPT_SSL_VERIFYPEER, 0 );
-        curl_setopt( $cURLHandle, CURLOPT_SSL_VERIFYHOST, 0 );
+
+        if ( $this->settings->ignoreSslErrors ) {
+          curl_setopt( $cURLHandle, CURLOPT_SSL_VERIFYPEER, 0 );
+          curl_setopt( $cURLHandle, CURLOPT_SSL_VERIFYHOST, 0 );
+        }
+
         curl_setopt( $cURLHandle, CURLOPT_HTTP_VERSION, CURL_HTTP_VERSION_1_1 );
         curl_setopt( $cURLHandle, CURLOPT_HTTPHEADER, $headers );
         curl_setopt( $cURLHandle, CURLOPT_POST, 1 );