Bug #77787 [NEW]: OPENSSL PRIVATE KEY is missing

From: xxalfa at gmail dot com Operating system: PHP version: 7.3.3 Package: OpenSSL related Bug Type: Bug Bug description:OPENSSL PRIVATE KEY is missing Description: ------------ When creating private and public keys, there are some problems. With the option "config" I have the configuration file "C:\php\extras\ssl\openssl.cnf" deposited, but I get only the public key. PHP insists on taking the configuration file located in "C:\usr\local\ssl\openssl.cnf". Test script: --------------- <?php // C:\Users\User\Desktop\php-openssl-certificate-example.cmd // @echo off // title PHP Development Server // cd "%cd%" // "C:\php\php.exe" "php-openssl-certificate-example.php" // pause // C:\Users\User\Desktop\php-openssl-certificate-example.php [PID:9676][PHP:7.3.3] //------------------------------------------------- // HEAD //------------------------------------------------- declare( strict_types = 1 ); header( 'Content-Type:text/plain' ); error_reporting( E_ALL ); ini_set( 'display_errors', '1' ); ini_set( 'html_errors', '0' ); define( 'CORE_DIR', dirname( __FILE__ ) . DIRECTORY_SEPARATOR ); isset( $argv ) or trigger_error( 'This is a command terminal application.', E_USER_ERROR ); echo __FILE__ . ' [PID:' . getmypid() . '][PHP:' . phpversion() . ']' . PHP_EOL . PHP_EOL; extension_loaded( 'openssl' ) or dl( 'openssl' ) or trigger_error( 'The openssl extension is required.', E_USER_ERROR ); //------------------------------------------------- // CERTIFICATE LOCATIONS //------------------------------------------------- $array_of_certificate_locations = openssl_get_cert_locations(); echo var_export( $array_of_certificate_locations, true ) . PHP_EOL; // The ".rnd" file is created at the point of execution. In my case on the desktop. And not as planned in the specified directory. // $file_path = $array_of_certificate_locations[ 'default_default_cert_area' ] . DIRECTORY_SEPARATOR . '.rnd'; // file_exists( $file_path ) or touch( $file_path ); // is_writeable( $file_path ) or trigger_error( 'The file (' . $file_path . ') does not exist or is not writable.', E_USER_ERROR ); //------------------------------------------------- // CREATE PRIVATE AND PUBLIC KEY //------------------------------------------------- $options = array(); $options[ 'config' ] = realpath( 'C:\php' . DIRECTORY_SEPARATOR . 'extras/ssl\\openssl.cnf' ); // Returns: only public key // $options[ 'config' ] = realpath( 'C:\usr\local\ssl\renamed_openssl.cnf' ); // Returns: only public key // $options[ 'config' ] = realpath( 'C:\usr\local\ssl\openssl.cnf' ); // Returns: private and public key // $options[ 'encrypt_key' ] = true; // If I set this value true, where do I deposit the password? $options[ 'digest_alg' ] = 'sha512'; $options[ 'private_key_bits' ] = 1024; $options[ 'private_key_type' ] = OPENSSL_KEYTYPE_RSA; $openssl_resource = openssl_pkey_new( $options ) or trigger_error( 'An error occurred while processing the configuration.', E_USER_ERROR ); // openssl_pkey_export( $openssl_resource, $private_key, $passphrase = 'password' ); // Is $passphrase set only if encrypt_key is true? openssl_pkey_export( $openssl_resource, $private_key ); echo $private_key . PHP_EOL . PHP_EOL; $public_key = openssl_pkey_get_details( $openssl_resource ); $public_key = $public_key[ 'key' ]; echo $public_key . PHP_EOL . PHP_EOL; //------------------------------------------------- // PLAINTEXT //------------------------------------------------- // $plaintext = 'plaintext data goes here'; // echo $plaintext . PHP_EOL . PHP_EOL; //------------------------------------------------- // OPENSSL PRIVATE ENCRYPT //------------------------------------------------- // Encrypt data with the private key. // openssl_private_encrypt( $plaintext, $private_encrypted, $private_key ); // echo 'openssl_private_encrypt' . PHP_EOL . PHP_EOL . bin2hex( $private_encrypted ) . PHP_EOL . PHP_EOL; //------------------------------------------------- // OPENSSL PUBLIC DECRYPT //------------------------------------------------- // Data encrypted with the private key, now decrypted with the public key. // openssl_public_decrypt( $private_encrypted, $public_decrypted, $public_key ); // echo 'openssl_public_decrypt' . PHP_EOL . PHP_EOL . $public_decrypted . PHP_EOL . PHP_EOL; //------------------------------------------------- // OPENSSL PUBLIC ENCRYPT //------------------------------------------------- // Encrypt data with the public key. // openssl_public_encrypt( $plaintext, $public_encrypted, $public_key ); // echo 'openssl_public_encrypt' . PHP_EOL . PHP_EOL . bin2hex( $public_encrypted ) . PHP_EOL . PHP_EOL; //------------------------------------------------- // OPENSSL PRIVATE DECRYPT //------------------------------------------------- // Data encrypted with the public key, now decrypted with the private key. // openssl_private_decrypt( $public_encrypted, $private_decrypted, $private_key ); // echo 'openssl_private_decrypt' . PHP_EOL . PHP_EOL . $private_decrypted . PHP_EOL . PHP_EOL; //------------------------------------------------- // ERROR HANDLING //------------------------------------------------- // echo openssl_error_string() . PHP_EOL . PHP_EOL; ?> Expected result: ---------------- array ( 'default_cert_file' => 'C:\\usr\\local\\ssl/cert.pem', 'default_cert_file_env' => 'SSL_CERT_FILE', 'default_cert_dir' => 'C:\\usr\\local\\ssl/certs', 'default_cert_dir_env' => 'SSL_CERT_DIR', 'default_private_dir' => 'C:\\usr\\local\\ssl/private', 'default_default_cert_area' => 'C:\\usr\\local\\ssl', 'ini_cafile' => '', 'ini_capath' => '', ) -----BEGIN PRIVATE KEY----- MIICdwIBADANBgkqhkiG9w0BAQEFAASCAmEwggJdAgEAAoGBAL7Z4Z1x93+4nlO9 MLDBkzOswqPC6E3ztL8oPuhn8hfBqZ0xb5Vp+yMp9N+yu+UDnPn6bUzM+JX1qZfS UJY/gJxFIB3Ry2TAsKdHb645QKEwuIWEMGO7IuLx23eD5BjyDrJ6hSVqQrWefQGn eX2lpWfd7LPBBsEdMCvhGSLh1yUbAgMBAAECgYBWhxAsQux0Yq6dxqvZp5nmltAU URzjordy53tGAUKYlLwiwbQWaNtswOv9s9pOZYn5KBn/9PpLevquE7Nnu1jCOHQP 6snRVU2emDtLD4wydewgjGD5aq/UogeNCTBL5S3323/Ys+m3hKnWM5Ud2ekojDMi tCLD926s/gqPtPBPCQJBAOJh7kdHN/sNLldqWEB62WCMTZw2J90GvgIaXLVas1aH BUod+mygtGNZdbaO/rLDHaJ/+o0twwEuXDaynvRv5ecCQQDX0evUxOmjEpLP3ihP Q5IMwPCFL0hoDgDJORq7QqkrD6ICqhxR+AeI0vbx9uGxl/mg7f6/IDxFOCWpdOFG V/itAkEAmz+tuRQOQAz6CtjTTOTyzlNppgc9r0ZAaBDMI1LgSiauafXFF1neW4Ou RlQqN023tQkvOkJ3yQeSFbDJcbiLYQJBANDoZI2qpjWx7ubDtuUzFRa/VJK3ODFx DJW7bwLA/huuoDZQD+XQXwq0m1GQlttfrsV2WtcLDww500r61m1PDmkCQHFoOJ0a funMLzvdfijgwQmIJTgAg+ZZqrGqQapRrsimwTFNJ6+dOsBcDKaKfl66TQAAoeNW RuvAIB6JPTnvcZA= -----END PRIVATE KEY----- -----BEGIN PUBLIC KEY----- MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC+2eGdcfd/uJ5TvTCwwZMzrMKj wuhN87S/KD7oZ/IXwamdMW+VafsjKfTfsrvlA5z5+m1MzPiV9amX0lCWP4CcRSAd 0ctkwLCnR2+uOUChMLiFhDBjuyLi8dt3g+QY8g6yeoUlakK1nn0Bp3l9paVn3eyz wQbBHTAr4Rki4dclGwIDAQAB -----END PUBLIC KEY----- Actual result: -------------- array ( 'default_cert_file' => 'C:\\usr\\local\\ssl/cert.pem', 'default_cert_file_env' => 'SSL_CERT_FILE', 'default_cert_dir' => 'C:\\usr\\local\\ssl/certs', 'default_cert_dir_env' => 'SSL_CERT_DIR', 'default_private_dir' => 'C:\\usr\\local\\ssl/private', 'default_default_cert_area' => 'C:\\usr\\local\\ssl', 'ini_cafile' => '', 'ini_capath' => '', ) -----BEGIN PUBLIC KEY----- MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDEvBAJCSq/sJalTyvKOJvr/Avd 6vaSB3hIPnnsxC3nknyudbv5DYOyOUAf0gGaPjGyUyy/5UCWNaA7h5gPyAMigzMg EEikpfJxqoDqM3heMB5dU08hP/2QLVRW+ZJNUawrJhfz9fexuKgbzUM+OZrz6uWl zuNKJlpl1rumqYJK3QIDAQAB -----END PUBLIC KEY----- -- Edit bug report at https://bugs.php.net/bug.php?id=77787&edit=1 -- Try a snapshot (PHP 5.4): https://bugs.php.net/fix.php?id=77787&r=trysnapshot54 Try a snapshot (PHP 5.5): https://bugs.php.net/fix.php?id=77787&r=trysnapshot55 Try a snapshot (trunk): https://bugs.php.net/fix.php?id=77787&r=trysnapshottrunk Fixed in SVN: https://bugs.php.net/fix.php?id=77787&r=fixed Fixed in release: https://bugs.php.net/fix.php?id=77787&r=alreadyfixed Need backtrace: https://bugs.php.net/fix.php?id=77787&r=needtrace Need Reproduce Script: https://bugs.php.net/fix.php?id=77787&r=needscript Try newer version: https://bugs.php.net/fix.php?id=77787&r=oldversion Not developer issue: https://bugs.php.net/fix.php?id=77787&r=support Expected behavior: https://bugs.php.net/fix.php?id=77787&r=notwrong Not enough info: https://bugs.php.net/fix.php?id=77787&r=notenoughinfo Submitted twice: https://bugs.php.net/fix.php?id=77787&r=submittedtwice register_globals: https://bugs.php.net/fix.php?id=77787&r=globals PHP 4 support discontinued: https://bugs.php.net/fix.php?id=77787&r=php4 Daylight Savings: https://bugs.php.net/fix.php?id=77787&r=dst IIS Stability: https://bugs.php.net/fix.php?id=77787&r=isapi Install GNU Sed: https://bugs.php.net/fix.php?id=77787&r=gnused Floating point limitations: https://bugs.php.net/fix.php?id=77787&r=float No Zend Extensions: https://bugs.php.net/fix.php?id=77787&r=nozend MySQL Configuration Error: https://bugs.php.net/fix.php?id=77787&r=mysqlcfg