#41423 [Opn->Asn]: PHP assumes wrongly that certain ciphers are enabled in OpenSSL

ID: 41423 Updated by: pajoye@php.net Reported By: mdh at solitox dot net -Status: Open +Status: Assigned Bug Type: Compile Failure Operating System: Linux PHP Version: 5.2.2 -Assigned To: +Assigned To: pajoye New Comment: "PHP's build assumes that the 3DES, DES, and RC2 ciphers are enabled in OpenSSL. While they are enabled by default, they may not be enabled on all systems" That's right, the OPENSSL_NO_* macros should be used. " and DES and RC2 are considered largely deprecated by the majority of the cryptography community." That's sadly not relevant, we do support them as well as openssl. It is up to the users to decide. Patch on its way. Thanks for this report! Previous Comments: ------------------------------------------------------------------------ [2007-05-17 21:39:26] mdh at solitox dot net Description: ------------ PHP's build assumes that the 3DES, DES, and RC2 ciphers are enabled in OpenSSL. While they are enabled by default, they may not be enabled on all systems, and DES and RC2 are considered largely deprecated by the majority of the cryptography community. This prevents compiling of OpenSSL support against OpenSSL libraries without support for these ciphers. Reproduce code: --------------- /* sanity check the cipher */ switch (cipherid) { case PHP_OPENSSL_CIPHER_RC2_40: cipher = EVP_rc2_40_cbc(); break; case PHP_OPENSSL_CIPHER_RC2_64: cipher = EVP_rc2_64_cbc(); break; case PHP_OPENSSL_CIPHER_RC2_128: cipher = EVP_rc2_cbc(); break; case PHP_OPENSSL_CIPHER_DES: cipher = EVP_des_cbc(); break; case PHP_OPENSSL_CIPHER_3DES: cipher = EVP_des_ede3_cbc(); break; Actual result: -------------- /u/root/build/php-5.2.2/ext/openssl/openssl.c:2932: undefined reference to `EVP_rc2_40_cbc' ext/openssl/.libs/openssl.o(.text+0x55af):/u/root/build/php-5.2.2/ext/openssl/openssl.c:2938: undefined reference to `EVP_rc2_cbc' ext/openssl/.libs/openssl.o(.text+0x55b9):/u/root/build/php-5.2.2/ext/openssl/openssl.c:2935: undefined reference to `EVP_rc2_64_cbc' ------------------------------------------------------------------------ -- Edit this bug report at http://bugs.php.net/?id=41423&edit=1