Bug #55470 [Fbk->Bgs]: Crash when calling openssl_sign under mod_php

Edit report at https://bugs.php.net/bug.php?id=55470&edit=1 ID: 55470 Updated by: pajoye@php.net Reported by: douglas dot wright at pre-school dot org dot uk Summary: Crash when calling openssl_sign under mod_php -Status: Feedback +Status: Bogus Type: Bug Package: Apache2 related Operating System: Windows Server 2008/Windows 7 PHP Version: 5.3.7 Assigned To: pajoye Block user comment: N Private report: N New Comment: Actually not a php issue but yet another break in ABI between openssl versions. Apachelounge will restore 0.9.8r support. We will try to sync us to move to 1.x or provide two builds. Previous Comments: ------------------------------------------------------------------------ [2011-08-30 18:26:04] pajoye@php.net See http://www.apachelounge.com/viewtopic.php?p=19040#19040 So it is most likely due to this change and we can't update to 1.0.0 yet (for this exact reason). I will see if they can rollback this change. ------------------------------------------------------------------------ [2011-08-30 11:53:52] pajoye@php.net it is already 0.9.8r, which version do you need then? ------------------------------------------------------------------------ [2011-08-30 10:37:20] johannes@php.net I think Windows' openssl lib should be updated. ------------------------------------------------------------------------ [2011-08-30 10:13:23] douglas dot wright at pre-school dot org dot uk Having tested, I confirm that overwriting the Apache version of those two SSL files with PHP's stops the crash. However as I do use HTTPS, it's not a fix I can put into production. Surely PHP should be using it's own copy of openssl? ------------------------------------------------------------------------ [2011-08-30 08:10:26] ska-pig at gmx dot net The problem is probably a wrong opensll library version. When PHP runs as an apache module it will use libeay32.dll and ssleay32.dll from the apache\bin directory rather than the ones in your php installation folder. Apache from apachelounge is built with openssl 1.0.0d but PHP with openssl 0.9.8r. Copying libeay32.dll and ssleay32.dll from the PHP folder to your apache bin directory will likely solve the problem, although this might cause problems with apache if you use SSL with apache as well. ------------------------------------------------------------------------ The remainder of the comments for this report are too long. To view the rest of the comments, please view the bug report online at https://bugs.php.net/bug.php?id=55470 -- Edit this bug report at https://bugs.php.net/bug.php?id=55470&edit=1