cf11413db3
Fix the path to the .pem
2011-09-08 09:27:47 +00:00
da376383e8
- Make usage of new PHP_FE_END macro
2011-07-25 11:35:02 +00:00
39988d1263
When we have a blocking SSL socket, respect the timeout option.
...
reading from SSL sockets could block indefinitely due to the lack
of timeout
2011-07-23 01:29:44 +00:00
ce771a2883
removing openssl test for bug #55169 per Scott MacVicar's request; duplicate coverage of opensssl_random_pseudo_bytes.phpt
2011-07-20 21:25:39 +00:00
7b21ee9b3f
update test for bug #55169 , fix skipif
2011-07-20 21:13:03 +00:00
2ac4cd97c8
update test for bug #55169 , don't require the extension in INI
2011-07-20 20:57:17 +00:00
80cff0c0e9
tests for bug #55169 (mcrypt and openssl)
2011-07-20 18:59:05 +00:00
69c3f8cbba
- re apply the rng change specific to windows, long term it should be a std function but as this function was badly introduced in the 1st place, we have to fix the bad things here instead, pls do not revert again, bad idea.
2011-07-19 23:01:41 +00:00
25fb19764a
Revert change to use a special Windows version of openssl_random_pseudo_bytes().
...
Lets discuss this on internals first. We're advertising something from the OpenSSL library
and then subverting it with another Windows OS call.
What are the implications of this? Should we make this available in ext/standard/ instead?
2011-07-19 22:29:55 +00:00
02581a0052
openssl_encrypt() / openssl_decrypt() were flawed and truncated the key to the default size for the case of a variable key length cipher.
...
The result is a key of 448 bits being passed to the blowfish algorithm would be truncated to 128 bit.
Also fixed an error in the zend_parse_parameters() having an invalid character being used.
2011-07-19 22:15:56 +00:00
8278f831a5
- use php_win32_get_random_bytes instead of over slow and partially wrong openssl's version
2011-07-10 14:59:33 +00:00
3c8bd9ebb6
- did I not kill that already? (do not use rand_screen, pointless on server and not TS)
2011-06-16 13:06:41 +00:00
ddd88ff93c
- Fixed bug #55028 (// is abad comment)
2011-06-10 22:48:36 +00:00
2b72c6e7df
- Fixed bug #54992 : Stream not closed and error not returned when SSL CN_match
...
fails.
2011-06-08 00:23:02 +00:00
4737910b69
- Added new parameter parsing option (p - for valid path (string without null byte in the middle))
...
# The tests will be fixed in the next commits
2011-06-06 21:28:16 +00:00
9e7ae3b2d0
Allow management of your own padding in openssl_encrypt/decrypt.
...
For using mcrypt / openssl interchangeabley managing your own padding is the only solution.
2011-05-20 18:56:13 +00:00
0c8438462c
The project calls itself OpenSSL and not openSSL, so let's keep it
...
that way in our code as well.
2011-04-25 16:50:30 +00:00
380c3e5127
SSLV2 patch cleanup
2011-04-24 23:27:48 +00:00
f1806e67e6
Support for openssl without SSLv2 supprot compiled in. Distros are starting to
...
remove support now and this wasn't compiling anymore on my Debian dev box.
2011-04-24 20:47:22 +00:00
a286fa3523
Add the libraries we actually test and need for LDAP and OpenSSL, fixes bug #53339
...
Patch by Clint Byrum
2011-03-18 18:47:09 +00:00
32c4a3a061
- fix bug #54061 , memory leak in openssl_decrypt
2011-02-21 12:50:26 +00:00
f922e31129
- fix bug #54061 , memory leak in openssl_decrypt
2011-02-21 12:47:38 +00:00
b526a6ef44
- fix bug #54060 , memory leak in openssl_encrypt
2011-02-21 10:07:31 +00:00
0203cc3d44
- Year++
2011-01-01 02:17:06 +00:00
063393f29b
- Fixed bug #53592 (stream_socket_enable_crypto() busy-waits in client mode).
...
- Fixed stream_socket_enable_crypto() not honoring the socket timeout in
server mode.
2010-12-23 01:44:54 +00:00
3722811395
make sure the stream context is present before looking for any options
...
and fix segfault
2010-12-04 21:54:20 +00:00
18ec6dae2c
Implemented FR #53447 (Cannot disable SessionTicket extension for servers that
...
do not support it).
I haven't written a test due to the need for such a test to have a HTTPS server
available which mishandles SessionTicket requests; it's likely that server
administrators will gradually fix this either intentionally or through OpenSSL
upgrades. That said, if there's a great clamoring for a test, I'll work one up.
2010-12-03 09:34:35 +00:00
3fd615cc8d
- not TS and useless on server, also not required anymore with the supported windows versions
2010-12-02 11:37:43 +00:00
6e8c2ba690
- Fixed bug #53136 (Invalid read on openssl_csr_new())
2010-11-12 23:34:03 +00:00
86944b47a6
Fix vim marker folds.
2010-10-13 09:23:39 +00:00
412d151681
Fixed extrenous warning inside openssl_encrypt() for cases where iv not provided, but algo does not require an iv
2010-10-07 12:32:00 +00:00
2d8a4ea299
- Fixed bug #52947 (segfault when ssl stream option capture_peer_cert_chain used)
2010-09-29 01:25:35 +00:00
aa0ed267a2
- use TSRMLS_*C instead of TSRMLS_FETCH in zend_list_insert
2010-09-16 09:13:19 +00:00
80926568f1
- Fixed bug #52183 (Reflectionfunction reports invalid number of arguments for function aliases)
2010-06-26 16:03:39 +00:00
276f9a8678
- #48632 , ssl AES support
2010-06-21 08:47:25 +00:00
abde405f1d
- #45808 , stream_socket_enable_crypto() blocks and eats CPU
2010-06-20 16:33:16 +00:00
4463284456
fix ZTS build
2010-05-20 11:20:44 +00:00
340d57b13a
Add parameter to openssl_(en|de)crypt
2010-05-19 20:05:09 +00:00
5d9b0a4a6f
Removed double allocation of buffer inside openssl_random_pseudo_bytes() and cleanup code
2010-05-11 14:31:00 +00:00
0a34d10783
revert change #298288 : Remove old dsp/dsw/makefile files
2010-04-28 14:41:51 +00:00
dd8e59da8f
Removed safe_mode
...
* Removed ini options, safe_mode*
* Removed --enable-safe-mode --with-exec-dir configure options on Unix
* Updated extensions, SAPI's and core
* php_get_current_user() is now declared in main.c, thrus no need to include safe_mode.h anymore
2010-04-26 23:53:30 +00:00
e9f9f66f2e
Fix for bug #51647 Certificate file without private key (pk in another file) doesn't work
2010-04-23 13:54:40 +00:00
6a1ad16066
- Fixed compiler warnings
2010-04-23 13:32:03 +00:00
4646062956
fix typo
2010-04-22 16:00:45 +00:00
a15efa6979
revert most of the Andrey's patch that causes segfaults
...
(as agreed with Pierre)
2010-04-22 15:59:44 +00:00
64a97ee663
initialize variable. this code still segfaults in OpenSSL, no idea why
2010-04-22 11:56:08 +00:00
518a17e7bf
Remove old dsp/dsw/makefile files, these arent used by the build system anymore and are barely updated nor available for all extensions
2010-04-21 23:36:49 +00:00
f151e24218
fix infinite loop in the test
2010-04-20 10:04:26 +00:00
c04f752625
Fix for bug#49234 method not found ssl_set
...
Patch was tested and compiles on Windows. (Thanks Kalle)
2010-04-15 11:01:30 +00:00
7ef4cdf471
Remove a couple TSRMLS_FETCH() calls around ext/main/sapi
2010-04-13 11:02:15 +00:00
Hannes Magnusson