mirror of
https://github.com/php/php-src.git
synced 2026-04-21 23:18:13 +02:00
Rasmus Lerdorf
32484e3f5f
SSLv3 is going away. Debian8 already ships with an openssl with no SSLv3 support which was causing these tests to fail.
60 lines
2.2 KiB
PHP
60 lines
2.2 KiB
PHP
--TEST--
|
|
Capture SSL session meta array in stream context
|
|
--SKIPIF--
|
|
<?php
|
|
if (!extension_loaded("openssl")) die("skip openssl not loaded");
|
|
if (!function_exists("proc_open")) die("skip no proc_open");
|
|
if (OPENSSL_VERSION_NUMBER < 0x10001001) die("skip OpenSSLv1.0.1 required");
|
|
--FILE--
|
|
<?php
|
|
$serverCode = <<<'CODE'
|
|
$serverUri = "ssl://127.0.0.1:64321";
|
|
$serverFlags = STREAM_SERVER_BIND | STREAM_SERVER_LISTEN;
|
|
$serverCtx = stream_context_create(['ssl' => [
|
|
'local_cert' => __DIR__ . '/bug54992.pem'
|
|
]]);
|
|
|
|
$server = stream_socket_server($serverUri, $errno, $errstr, $serverFlags, $serverCtx);
|
|
phpt_notify();
|
|
|
|
@stream_socket_accept($server, 1);
|
|
@stream_socket_accept($server, 1);
|
|
@stream_socket_accept($server, 1);
|
|
@stream_socket_accept($server, 1);
|
|
CODE;
|
|
|
|
$clientCode = <<<'CODE'
|
|
$serverUri = "ssl://127.0.0.1:64321";
|
|
$clientFlags = STREAM_CLIENT_CONNECT;
|
|
$clientCtx = stream_context_create(['ssl' => [
|
|
'verify_peer' => true,
|
|
'cafile' => __DIR__ . '/bug54992-ca.pem',
|
|
'peer_name' => 'bug54992.local',
|
|
'capture_session_meta' => true,
|
|
]]);
|
|
|
|
phpt_wait();
|
|
|
|
stream_context_set_option($clientCtx, 'ssl', 'crypto_method', STREAM_CRYPTO_METHOD_TLSv1_0_CLIENT);
|
|
@stream_socket_client($serverUri, $errno, $errstr, 1, $clientFlags, $clientCtx);
|
|
$meta = stream_context_get_options($clientCtx)['ssl']['session_meta'];
|
|
var_dump($meta['protocol']);
|
|
|
|
stream_context_set_option($clientCtx, 'ssl', 'crypto_method', STREAM_CRYPTO_METHOD_TLSv1_1_CLIENT);
|
|
@stream_socket_client($serverUri, $errno, $errstr, 1, $clientFlags, $clientCtx);
|
|
$meta = stream_context_get_options($clientCtx)['ssl']['session_meta'];
|
|
var_dump($meta['protocol']);
|
|
|
|
stream_context_set_option($clientCtx, 'ssl', 'crypto_method', STREAM_CRYPTO_METHOD_TLSv1_2_CLIENT);
|
|
@stream_socket_client($serverUri, $errno, $errstr, 2, $clientFlags, $clientCtx);
|
|
$meta = stream_context_get_options($clientCtx)['ssl']['session_meta'];
|
|
var_dump($meta['protocol']);
|
|
CODE;
|
|
|
|
include 'ServerClientTestCase.inc';
|
|
ServerClientTestCase::getInstance()->run($clientCode, $serverCode);
|
|
--EXPECTF--
|
|
string(5) "TLSv1"
|
|
string(7) "TLSv1.1"
|
|
string(7) "TLSv1.2"
|