#34261 [Asn->Bgs]: openssl_pkcs7_verify returns FALSE for msg that is correct

ID: 34261 Updated by: pajoye@php.net Reported By: arnaud dot bertrand at apvsys dot org -Status: Assigned +Status: Bogus Bug Type: OpenSSL related Operating System: * PHP Version: 5CVS-2005-08-28 Assigned To: wez New Comment: Cannot reproduce with 5.2-cvs or 5.1 (windows, linux and bsd, openssl 0.9.8a). Previous Comments: ------------------------------------------------------------------------ [2005-09-21 12:07:52] sniper@php.net Assigned to the maintainer. ------------------------------------------------------------------------ [2005-09-10 01:21:28] arnaud dot bertrand at apvsys dot org Hi, here is the full testcase: http://www.apvsys.org/testcase.tgz Download this file and extract it in / The 3 files will be extracted in /tmp tmp/thawte_freemail.cer tmp/msg.txt tmp/testcase.php just execute testcase.php at the current time: you will get: Digital Signature BAD! Now, change the system date to 9/9/2004 rexecute it... Now the message is valid and you should get: Digital Signature OK! array(11) { ["name"]=> string(65) "/CN=Thawte Freemail Member/emailAddress=arnaud.bertrand@n-tech.be" (...) ------------------------------------------------------------------------ [2005-09-07 16:27:59] sniper@php.net Can you please provide a full reproducing case with all the required files included? ------------------------------------------------------------------------ [2005-08-28 10:35:05] arnaud dot bertrand at apvsys dot org Thank for your fast answer, I've just tried with the latest win32 version (begin of the phpinfo() follows). Result is unfortunately identical with the latest version. The bug is still in. phpinfo() PHP Version 5.1.0-dev System Windows NT EULER 5.1 build 2600 Build Date Aug 28 2005 08:23:12 Configure Command cscript /nologo configure.js "--enable-snapshot-build" "--with-gd=shared" Server API Apache 2.0 Handler Virtual Directory Support enabled Configuration File (php.ini) Path C:\php\php.ini PHP API 20041225 PHP Extension 20050617 Zend Extension 220050617 Debug Build no Thread Safety enabled Zend Memory Manager enabled IPv6 Support enabled Registered PHP Streams php, file, http, ftp, compress.zlib, https, ftps Registered Stream Socket Transports tcp, udp, ssl, sslv3, sslv2, tls Registered Stream Filters convert.iconv.*, string.rot13, string.toupper, string.tolower, string.strip_tags, convert.*, zlib.* ------------------------------------------------------------------------ [2005-08-26 16:34:56] sniper@php.net Please try using this CVS snapshot: http://snaps.php.net/php5-latest.tar.gz For Windows: http://snaps.php.net/win32/php5-win32-latest.zip ------------------------------------------------------------------------ The remainder of the comments for this report are too long. To view the rest of the comments, please view the bug report online at http://bugs.php.net/34261 -- Edit this bug report at http://bugs.php.net/?id=34261&edit=1