Bug #41631 [Asn->Csd]: default_socket_timeout does not work with SSL

Edit report at https://bugs.php.net/bug.php?id=41631&edit=1 ID: 41631 Updated by: rdlowrey@php.net Reported by: david at acz dot org Summary: default_socket_timeout does not work with SSL -Status: Assigned +Status: Closed Type: Bug Package: OpenSSL related Operating System: * -PHP Version: 5.2, 5.3 +PHP Version: 5.2, 5.3, 5.4, 5.5, 5.6 -Assigned To: pajoye +Assigned To: rdlowrey Block user comment: N Private report: N New Comment: 7 years is long enough :) The problem here was that the SSL_read() function in the relevant code section would block indefinitely waiting for data on a blocking socket connection. The solution was to poll the underlying socket for readable data (adhering to any defined timeouts) before moving on to SSL_read(). If no data arrives in the prescribed time window we now report an error and pull out of the operation. This issue should be fixed by commit 6569db8 in the 5.4 branch and merged up through to master: https://github.com/php/php-src/commit/6569db88081562f68a4f79e52cba83482bdf05fc The next series of releases will reflect this fix: - 5.4.33 - 5.5.17 - 5.6.0-rc4 Previous Comments: ------------------------------------------------------------------------ [2014-03-19 18:02:06] alex at modula-shop-systems dot de Currently *still* experiencing this on this build of php: PHP 5.4.26-1~dotdeb.0 What is quite ridiculous for a bug that has been reported nearly 7 years ago ! Is it really that difficult to fix this bug? It affects also the SoapClient and makes it quite useless / forces ugly fallbacks to CURL when there is a need to catch timeouts over https. This is really not an uncommon requirement for php in enterprise applications and should simply work. ------------------------------------------------------------------------ [2013-12-13 09:39:45] lobbin at gmail dot com Honestly, this bug has been open with a potential patch since _2007_. It also contains a perfectly well test case to reproduce the error. ------------------------------------------------------------------------ [2013-03-27 11:48:04] oxygenus at gmail dot com This is taking down my servers as well, everytime some other server is down for maintainance or some network issue occurs. ------------------------------------------------------------------------ [2011-05-12 17:38:18] mgallelli at gmail dot com Hi, i've tested on 5.2.17 and 5.3.2 with the same result. As described i've used this script: time php -n -r 'ini_set("default_socket_timeout", 1); fopen("https://mydomain.it/sleep.php", "r");' but it doesn't wait 1 sec but 15 as into sleep.php page. ------------------------------------------------------------------------ [2011-03-28 23:51:34] arkadi dot shishlov at gmail dot com A simple solution is to use HAProxy to proxy SSL partner services. Works for me. defaults mode tcp contimeout 5000 clitimeout 30000 srvtimeout 30000 listen service.gjensidigebaltic.lv 127.0.0.1:10001 dispatch 193.111.247.167:443 listen services.seesam.lv 127.0.0.1:10007 dispatch 217.28.49.7:443 ------------------------------------------------------------------------ The remainder of the comments for this report are too long. To view the rest of the comments, please view the bug report online at https://bugs.php.net/bug.php?id=41631 -- Edit this bug report at https://bugs.php.net/bug.php?id=41631&edit=1