#41423 [NEW]: PHP assumes wrongly that certain ciphers are enabled in OpenSSL

From: mdh at solitox dot net Operating system: Linux PHP version: 5.2.2 PHP Bug Type: Compile Failure Bug description: PHP assumes wrongly that certain ciphers are enabled in OpenSSL Description: ------------ PHP's build assumes that the 3DES, DES, and RC2 ciphers are enabled in OpenSSL. While they are enabled by default, they may not be enabled on all systems, and DES and RC2 are considered largely deprecated by the majority of the cryptography community. This prevents compiling of OpenSSL support against OpenSSL libraries without support for these ciphers. Reproduce code: --------------- /* sanity check the cipher */ switch (cipherid) { case PHP_OPENSSL_CIPHER_RC2_40: cipher = EVP_rc2_40_cbc(); break; case PHP_OPENSSL_CIPHER_RC2_64: cipher = EVP_rc2_64_cbc(); break; case PHP_OPENSSL_CIPHER_RC2_128: cipher = EVP_rc2_cbc(); break; case PHP_OPENSSL_CIPHER_DES: cipher = EVP_des_cbc(); break; case PHP_OPENSSL_CIPHER_3DES: cipher = EVP_des_ede3_cbc(); break; Actual result: -------------- /u/root/build/php-5.2.2/ext/openssl/openssl.c:2932: undefined reference to `EVP_rc2_40_cbc' ext/openssl/.libs/openssl.o(.text+0x55af):/u/root/build/php-5.2.2/ext/openssl/openssl.c:2938: undefined reference to `EVP_rc2_cbc' ext/openssl/.libs/openssl.o(.text+0x55b9):/u/root/build/php-5.2.2/ext/openssl/openssl.c:2935: undefined reference to `EVP_rc2_64_cbc' -- Edit bug report at http://bugs.php.net/?id=41423&edit=1 -- Try a CVS snapshot (PHP 4.4): http://bugs.php.net/fix.php?id=41423&r=trysnapshot44 Try a CVS snapshot (PHP 5.2): http://bugs.php.net/fix.php?id=41423&r=trysnapshot52 Try a CVS snapshot (PHP 6.0): http://bugs.php.net/fix.php?id=41423&r=trysnapshot60 Fixed in CVS: http://bugs.php.net/fix.php?id=41423&r=fixedcvs Fixed in release: http://bugs.php.net/fix.php?id=41423&r=alreadyfixed Need backtrace: http://bugs.php.net/fix.php?id=41423&r=needtrace Need Reproduce Script: http://bugs.php.net/fix.php?id=41423&r=needscript Try newer version: http://bugs.php.net/fix.php?id=41423&r=oldversion Not developer issue: http://bugs.php.net/fix.php?id=41423&r=support Expected behavior: http://bugs.php.net/fix.php?id=41423&r=notwrong Not enough info: http://bugs.php.net/fix.php?id=41423&r=notenoughinfo Submitted twice: http://bugs.php.net/fix.php?id=41423&r=submittedtwice register_globals: http://bugs.php.net/fix.php?id=41423&r=globals PHP 3 support discontinued: http://bugs.php.net/fix.php?id=41423&r=php3 Daylight Savings: http://bugs.php.net/fix.php?id=41423&r=dst IIS Stability: http://bugs.php.net/fix.php?id=41423&r=isapi Install GNU Sed: http://bugs.php.net/fix.php?id=41423&r=gnused Floating point limitations: http://bugs.php.net/fix.php?id=41423&r=float No Zend Extensions: http://bugs.php.net/fix.php?id=41423&r=nozend MySQL Configuration Error: http://bugs.php.net/fix.php?id=41423&r=mysqlcfg