Sec Bug->Bug #79501 [Opn->Sus]: TLS connections freezing on 7.4 (all versions after 7.3.17)
| From: | stas@php.net | Date: | Mon, 20 Apr 2020 18:47:01 +0000 |
| Subject: | Sec Bug->Bug #79501 [Opn->Sus]: TLS connections freezing on 7.4 (all versions after 7.3.17) | ||
| References: | 1 | Groups: | php.bugs |
| Request: | Send a blank email to php-bugs+get-226694@lists.php.net to get a copy of this message | ||
Edit report at https://bugs.php.net/bug.php?id=79501&edit=1
ID: 79501
Updated by: stas@php.net
Reported by: imnieves at gmail dot com
Summary: TLS connections freezing on 7.4 (all versions after
7.3.17)
-Status: Open
+Status: Suspended
-Type: Security
+Type: Bug
Package: *Encryption and hash functions
Operating System: Linux
PHP Version: 7.4.5
Block user comment: N
Private report: Y
New Comment:
I don't think "something in OpenSSL, or perhaps PHP itself, changed" is an actionable
data that we could do anything with. If you have some specific reproducible issue traceable to PHP
core or PHP extension covered by bugs.php.net, please reopen with specific information.
Previous Comments:
------------------------------------------------------------------------
[2020-04-20 17:30:35] imnieves at gmail dot com
Description:
------------
Several users of phpredis (a PHP interface to Redis) have noticed (in php from 7.4.0 and onwards)
that TLS connections to Redis "freeze". This seems to mean that the connection stops or
otherwise times out. When we establish non-TLS connections to Redis (using the same phpredis), we
experience no "freeze". This seems to indicate that something in OpenSSL, or perhaps PHP
itself, changed which led to the freezing behavior.
I have personally verified the issue exists on all versions of 7.4 from 7.4.0 to 7.4.5, and that the
issue does not exists on version 7.3.17
Some more details and description exists at:
https://github.com/phpredis/phpredis/issues/1726
Test script:
---------------
Some testing setup exists at:
https://github.com/phpredis/phpredis/issues/1726
Expected result:
----------------
The expectation is that TLS connections do not "freeze".
------------------------------------------------------------------------
--
Edit this bug report at https://bugs.php.net/bug.php?id=79501&edit=1