#26369 [Opn]: openssl improvements

ID: 26369 Updated by: pajoye@php.net Reported By: joco at irckecel dot hu Status: Open Bug Type: Feature/Change Request Operating System: Linux PHP Version: 4.3.4 -Assigned To: +Assigned To: pajoye New Comment: As pkcs12 support is required, long serial support has already been added, see #39217. Will be present in 5.2.1, you can already try it with HEAD (php6). Previous Comments: ------------------------------------------------------------------------ [2006-09-05 19:43:53] naox at yum dot pl I agree. Openssl module is missing export into pkcs12. In openssl you can do it by: openssl pkcs12 -export -in cert.crt -inkey cert.key -out cert.p12 ------------------------------------------------------------------------ [2003-11-23 16:01:05] joco at irckecel dot hu Description: ------------ I have some suggestions for the PHP OpenSSL interface. The most significant is that PKCS#12 functions are not implemented. I think it's a very important part of OpenSSL, because it's a common format that OpenSSL and most popular browsers, like MSIE supports. I didn't find any other way to import certificates+private keys into MSIE, it would be the only way to support client certificate authentication. An other feature would be to support big integer serial numbers in certificates. Currently only long type serials are supported (openssl_csr_sign, openssl_x509_parse), but I've seen 64 bit serials, and IMHO longer ones may be supported by OpenSSL. ------------------------------------------------------------------------ -- Edit this bug report at http://bugs.php.net/?id=26369&edit=1