Bug #55470 [Com]: Crash when calling openssl_sign under mod_php

From: Date: Mon, 03 Oct 2011 14:57:29 +0000
Subject: Bug #55470 [Com]: Crash when calling openssl_sign under mod_php
References: 1  Groups: php.bugs 
Request: Send a blank email to php-bugs+get-164052@lists.php.net to get a copy of this message
Edit report at https://bugs.php.net/bug.php?id=55470&edit=1 ID: 55470 Comment by: paresy at gmx dot net Reported by: douglas dot wright at pre-school dot org dot uk Summary: Crash when calling openssl_sign under mod_php Status: Bogus Type: Bug Package: Apache2 related Operating System: Windows Server 2008/Windows 7 PHP Version: 5.3.7 Assigned To: pajoye Block user comment: N Private report: N New Comment: Has there been any progress on this one? ApacheLounge forums mentioned beta1 as a possible target for a move to 1.0, but that didn't happen. I would really appreciate if you could provide a second build with OpenSSL 1.0. Previous Comments: ------------------------------------------------------------------------ [2011-09-01 09:36:43] pajoye@php.net Actually not a php issue but yet another break in ABI between openssl versions. Apachelounge will restore 0.9.8r support. We will try to sync us to move to 1.x or provide two builds. ------------------------------------------------------------------------ [2011-08-30 18:26:04] pajoye@php.net See http://www.apachelounge.com/viewtopic.php?p=19040#19040 So it is most likely due to this change and we can't update to 1.0.0 yet (for this exact reason). I will see if they can rollback this change. ------------------------------------------------------------------------ [2011-08-30 11:53:52] pajoye@php.net it is already 0.9.8r, which version do you need then? ------------------------------------------------------------------------ [2011-08-30 10:37:20] johannes@php.net I think Windows' openssl lib should be updated. ------------------------------------------------------------------------ [2011-08-30 10:13:23] douglas dot wright at pre-school dot org dot uk Having tested, I confirm that overwriting the Apache version of those two SSL files with PHP's stops the crash. However as I do use HTTPS, it's not a fix I can put into production. Surely PHP should be using it's own copy of openssl? ------------------------------------------------------------------------ The remainder of the comments for this report are too long. To view the rest of the comments, please view the bug report online at https://bugs.php.net/bug.php?id=55470 -- Edit this bug report at https://bugs.php.net/bug.php?id=55470&edit=1

« previous php.bugs (#164052) next »