Bug #73243 [Asn->Fbk]: Unable to configure trusted CA

Edit report at https://bugs.php.net/bug.php?id=73243&edit=1 ID: 73243 Updated by: ab@php.net Reported by: petr dot maly at remotehost dot cz Summary: Unable to configure trusted CA -Status: Assigned +Status: Feedback Type: Bug Package: LDAP related Operating System: Windows 10 x86 PHP Version: 7.0.11 Assigned To: ab Block user comment: N Private report: N New Comment: Thanks for checking. The issue you've reported is, that the file C:\openldap\sysconf\ldap.conf doesn't get read in with x86 build. This is indeed due to an erroneous dependency build and will be fixed in future releases. The extra build I made for you uses the corrected dependency, so the config file is read in. Please verify with procmon (here https://technet.microsoft.com/de-de/sysinternals/processmonitor.aspx). With the file read in, it is up to the actual ldap.conf what to do with SSL and other things. Thanks. Previous Comments: ------------------------------------------------------------------------ [2016-10-05 14:40:11] petr dot maly at remotehost dot cz I have tried the provided library, but it is not working. I have connected to LDAP server using the original path for the configuration (c:\openldap\sysconf\ldap.conf) and the SSL was not even initiated. The initial SSL handshake packet was not sent by client (php_ldap.dll). If you are interested in wireshark captures I can provide it to you. Thanks, Petr ------------------------------------------------------------------------ [2016-10-05 14:13:46] ab@php.net Thanks Christoph, you nailed it. My bad paying more attention to 64-bit builds :) Seems bug #70971 is about same issue, whereby it was not obvious it's 32-bit only. @petr dot maly at remotehost dot cz, please check whether this build is correct http://windows.php.net/downloads/snaps/ostc/73243/vc14/7.0/x86/nts/php_ldap.dll Thanks. ------------------------------------------------------------------------ [2016-10-05 09:18:52] cmb@php.net There appears to be a bad build of oldap32_a(_debug).lib. In deps-7.1-vc14-x64.7z (2016-09-26) the lib contains c:\openldap\sysconf\ldap.conf, in deps-7.1-vc14-x86.7z (2016-09.26) it contains %SYSCONFDIR%\ldap.conf. If I build from winlibs/openldap, in both x86 and x64 %SYSCONFDIR% is resolved. Anatol, can you please have a look at this issue. ------------------------------------------------------------------------ [2016-10-04 23:57:35] cmb@php.net I can confirm the issue for x86 builds (checked PHP 7.0.10 and 7.0.11), but not for x64. ------------------------------------------------------------------------ [2016-10-04 23:36:18] petr dot maly at remotehost dot cz Thank you for your responses. I have spotted the '%SYSCONFDIR%' constant only in the binary (I cannot found the source code, from which this binary was build) which I have downloaded from [1] (the file "php_ldap.dll"). The releases [2] [3] suffers same issue. Thanks for clarification of '%SYSCONFDIR%' expression. However I have already tried to set LDAPCONF environment variable and I was not successful to setup the CA. Thanks, Petr Maly [1] http://windows.php.net/downloads/releases/php-7.0.11-nts-Win32-VC14-x86.zip [2] http://windows.php.net/downloads/qa/php-7.1.0RC3-nts-Win32-VC14-x86.zip [3] http://windows.php.net/downloads/snaps/php-7.1/r805580d/php-7.1-nts-windows-vc14-x86-r805580d.zip ------------------------------------------------------------------------ The remainder of the comments for this report are too long. To view the rest of the comments, please view the bug report online at https://bugs.php.net/bug.php?id=73243 -- Edit this bug report at https://bugs.php.net/bug.php?id=73243&edit=1