d_s_bisht/devsofttech_hms_ci4
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(abdm): skip TLS verify on self-loopback FHIR gateway handoff call

Browse Source 
HMS instances behind NAT with no live public IP can hit an expired/unreachable
TLS cert on their own base_url() when doing the internal handoff self-call to
AbdmGateway::share_prescription_bundle, causing 'Gateway handoff failed:
curl error 60: Peer's Certificate has expired'. This call never leaves the
local server, so skip peer verification by default via new
fhirGatewayHandoffSslVerify() helper. Set FHIR_HANDOFF_SSL_VERIFY=true in .env
to re-enable strict verification on deployments with a valid public cert.

Does not affect the actual outbound ABDM bridge submission (EAtriaBridgeConnector),
which keeps its own independent SSL verification/toggle.
This commit is contained in:
DevSoftTech Server 2026-07-29 12:39:05 +05:30
parent 7b1b81ce66
commit a5bbe3cc20
1 changed files with 33 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

33
app/Controllers/Opd_prescription.php
View File

@ -5512,6 +5512,14 @@ class Opd_prescription extends BaseController
'timeout' => $handoffTimeoutSec,
'connect_timeout' => 10,
'http_errors' => false,
// This is a same-server loopback handoff (self-call to our own
// AbdmGateway endpoint), not a call to an external/public party.
// HMS deployments behind NAT with no live public IP often have
// no valid/current TLS cert reachable for base_url(), so skip
// peer verification here. Can be forced back on via
// FHIR_HANDOFF_SSL_VERIFY=true in .env if the deployment does
// have a properly maintained public cert.
'verify' => $this->fhirGatewayHandoffSslVerify(),
]);
$response = $client->post($gatewayUrl, [
@ -5648,6 +5656,31 @@ class Opd_prescription extends BaseController
return false;
}
/**
* Whether to enforce TLS peer verification on the self-loopback handoff
* call to our own AbdmGateway::share_prescription_bundle endpoint.
*
* Defaults to OFF: HMS instances are frequently deployed behind NAT with
* no live public IP, so base_url() can point at a hostname without a
* currently-valid/reachable TLS cert even though the box is otherwise
* healthy. Since this call never leaves the local server, skipping peer
* verification here does not weaken the actual ABDM bridge submission
* (that outbound call to the bridge keeps its own independent SSL
* verification/toggle in EAtriaBridgeConnector).
*
* Set FHIR_HANDOFF_SSL_VERIFY=true in .env to re-enable strict
* verification for deployments that do have a valid public cert.
*/
private function fhirGatewayHandoffSslVerify(): bool
{
$raw = strtolower(trim((string) (getenv('FHIR_HANDOFF_SSL_VERIFY') ?: '')));
if ($raw === '') {
return false;
}
return ! in_array($raw, ['0', 'false', 'no', 'off'], true);
}
private function resolveRecentFhirGatewaySubmissionState(int $opdId, int $sessionId): ?array
{
if ($opdId <= 0 || ! $this->db->tableExists('health_records')) {