From 35acbfa75082dcd495574a89d99fe4d45807db5d Mon Sep 17 00:00:00 2001
From: thisgun <thisgun@naver.com>
Date: Fri, 7 Aug 2026 08:15:44 +0000
Subject: [PATCH] =?UTF-8?q?=EB=82=98=EC=9D=B4=EC=8A=A4=ED=8E=98=EC=9D=B4?=
 =?UTF-8?q?=20API=20=ED=86=B5=EC=8B=A0=20=EC=8B=9C=20=EC=84=9C=EB=B2=84=20?=
 =?UTF-8?q?=EC=9D=B8=EC=A6=9D=EC=84=9C=20=EA=B2=80=EC=A6=9D=20=EC=A0=81?=
 =?UTF-8?q?=EC=9A=A9?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

nicepay_reqPost() 가 원격 서버 인증서를 검증하지 않고 통신하던 것을
검증하도록 변경한다. 이니시스 연동부는 이미 동일하게 처리하고 있다.
API 호스트 4곳(webapi, pg-api, dc1-api, dc2-api) 인증서 검증 통과를
확인했다.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
(cherry picked from commit 6c888bd53d0a5949bb1e2fc96567c132622a6f8b)
---
 shop/settle_nicepay.inc.php | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/shop/settle_nicepay.inc.php b/shop/settle_nicepay.inc.php
index bf4524c39..2f1cd537c 100644
--- a/shop/settle_nicepay.inc.php
+++ b/shop/settle_nicepay.inc.php
@@ -60,7 +60,8 @@ if (! function_exists('nicepay_reqPost')) {
         curl_setopt($ch, CURLOPT_URL, $url);
         curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
         curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 15);					//connection timeout 15 
-        curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
+        curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, true);
+        curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 2);
         curl_setopt($ch, CURLOPT_POSTFIELDS, http_build_query($data));	//POST data
         curl_setopt($ch, CURLOPT_POST, true);
         $response = curl_exec($ch);