#40210 [NEW]: SOAP client crash when parse WSDL file located on a SSL/TLS apache server

From: maboiteaspam at gmail dot com Operating system: Solaris 8 PHP version: 5.2.0 PHP Bug Type: SOAP related Bug description: SOAP client crash when parse WSDL file located on a SSL/TLS apache server Description: ------------ The built-in SOAP client for PHP 5.2 crashs (SegFault) when trying to parse a WSDL file located on a secure Apache server configuring to support client authentication via X.509v3 certificates. The same WSDL works fine on an identical build on a Linux and Solaris server with HTTP and HTTPS connections without strong client authentification. But when the web server is configuring to be limited only to the web browsers that present a valid certificate, PHP SOAP SSL connection crashs. Reproduce code: --------------- Here is a working example: --- $soapClient = new SoapClient( "https://monserveur/generate_wsdl.php", array( 'local_cert'=> "asg-newCert.crt" ) ); The same example but we enable client authentication in the Apache's web server: --- $soapClient = new SoapClient( "https://monserveur/wservices/generate_wsdl.php", array( 'local_cert'=> "asg-newCert.crt" ) ); To enable the use of client certificates, we need to add the following directives to httpd.conf: <Location /www/wservices> SSLVerifyClient require SSLVerifyDepth 5 SSLCACertificateFile /opt/apache/conf/ssl/ca.pem SSLOptions +FakeBasicAuth SSLRequireSSL </Location> -- Edit bug report at http://bugs.php.net/?id=40210&edit=1 -- Try a CVS snapshot (PHP 4.4): http://bugs.php.net/fix.php?id=40210&r=trysnapshot44 Try a CVS snapshot (PHP 5.2): http://bugs.php.net/fix.php?id=40210&r=trysnapshot52 Try a CVS snapshot (PHP 6.0): http://bugs.php.net/fix.php?id=40210&r=trysnapshot60 Fixed in CVS: http://bugs.php.net/fix.php?id=40210&r=fixedcvs Fixed in release: http://bugs.php.net/fix.php?id=40210&r=alreadyfixed Need backtrace: http://bugs.php.net/fix.php?id=40210&r=needtrace Need Reproduce Script: http://bugs.php.net/fix.php?id=40210&r=needscript Try newer version: http://bugs.php.net/fix.php?id=40210&r=oldversion Not developer issue: http://bugs.php.net/fix.php?id=40210&r=support Expected behavior: http://bugs.php.net/fix.php?id=40210&r=notwrong Not enough info: http://bugs.php.net/fix.php?id=40210&r=notenoughinfo Submitted twice: http://bugs.php.net/fix.php?id=40210&r=submittedtwice register_globals: http://bugs.php.net/fix.php?id=40210&r=globals PHP 3 support discontinued: http://bugs.php.net/fix.php?id=40210&r=php3 Daylight Savings: http://bugs.php.net/fix.php?id=40210&r=dst IIS Stability: http://bugs.php.net/fix.php?id=40210&r=isapi Install GNU Sed: http://bugs.php.net/fix.php?id=40210&r=gnused Floating point limitations: http://bugs.php.net/fix.php?id=40210&r=float No Zend Extensions: http://bugs.php.net/fix.php?id=40210&r=nozend MySQL Configuration Error: http://bugs.php.net/fix.php?id=40210&r=mysqlcfg