Bug #69345 [Opn->Ana]: tls:// wrapper disables TLS 1.1+

Edit report at https://bugs.php.net/bug.php?id=69345&edit=1 ID: 69345 Updated by: rdlowrey@php.net Reported by: cf0hay at gmail dot com Summary: tls:// wrapper disables TLS 1.1+ -Status: Open +Status: Analyzed Type: Bug Package: Sockets related Operating System: Linux 64bit PHP Version: 5.6.7 -Assigned To: +Assigned To: rdlowrey Block user comment: N Private report: N New Comment: Prior to PHP 5.6 the tls:// wrapper specifically used the TLSv1 handshake method because at the time the code was written that was the only TLS protocol supported by the underlying openssl lib. As of 5.6.0 this behavior was changed to use the broadly compatible SSLv23 handshake method (but only allow the negotiation of TLSv1, TLSv1.1 or TLSv1.2). Likewise the ssl:// wrapper was modified to only negotiate SSL protocols with the goal being to encourage users to move to the more semantically appropriate tls:// wrapper going forward. However, after a lengthy discussion about this on the security mailing list these changes were deemed too much of a BC break and it was determined that the behavior should be reverted to use the old handshake method in 5.6.7. This means that all code wishing to support multiple protocol handshakes should use the ssl:// wrapper going forward. If you wish to only allow the negotiation of TLS protocols in your handshake you should use the "crypto_method" ssl context option to specify the protocols you wish to support as shown here: <?php $methodBitmask = STREAM_CRYPTO_METHOD_TLSv1_0_SERVER | STREAM_CRYPTO_METHOD_TLSv1_1_SERVER | STREAM_CRYPTO_METHOD_TLSv1_2_SERVER; $context = stream_context_create(["ssl" => [ "ciphers" => "AECDH-AES256-SHA", "crypto_method" => $methodBitmask ]]); stream_socket_server( "tls://127.0.0.1:4433", $errno, $errstr, STREAM_SERVER_BIND | STREAM_SERVER_LISTEN, $context ); Assigning a specific "crypto_method" bitmask is the only way to exercise fine-grained control over which SSL/TLS protocols are allowed in your encrypted clients/servers regardless of which stream wrapper is in use. For the record, I agree that tls://should attempt to negotiate any TLS protocol. However, due to the reason listed above I'm marking this as "won't fix" for now. If enough people find this problematic we can instigate a change. Previous Comments: ------------------------------------------------------------------------ [2015-04-01 10:39:19] cf0hay at gmail dot com Description: ------------ When creating a socket through tls:// wrapper, any TLS version over TLS 1.0 is disabled, even with the library supports higher versions. Only TLS 1.0 accepted. With ssl:// this problem does not occur. tls:// should enable everything over TLS 1.0 too. At the present moment it's impossible to to create a socket with TLS 1.2 support but without SSL 3 (because of POODLE). Test script: --------------- <?php stream_socket_accept( stream_socket_server( "tls://127.0.0.1:4433", $errno, $errstr, STREAM_SERVER_BIND | STREAM_SERVER_LISTEN, stream_context_create([ "ssl" => [ "ciphers" => "AECDH-AES256-SHA", ], ]) ) ); Expected result: ---------------- start the test script in one console, and issue this in another: $ openssl s_client -tls1_2 -cipher AECDH-AES256-SHA [...] Cipher : AECDH-AES256-SHA [...] The PHP script should end silently. Actual result: -------------- start the test script in one console, and issue this in another: $ openssl s_client -tls1_2 -cipher AECDH-AES256-SHA [...] [...]error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number[...] [...] The PHP script throws warnings before exiting: PHP Warning: stream_socket_accept(): SSL operation failed with code 1. OpenSSL Error messages: error:1409442E:SSL routines:SSL3_READ_BYTES:tlsv1 alert protocol version PHP Warning: stream_socket_accept(): Failed to enable crypto PHP Warning: stream_socket_accept(): accept failed: Success ------------------------------------------------------------------------ -- Edit this bug report at https://bugs.php.net/bug.php?id=69345&edit=1