[php-src] Issue #8369: OpenSSL 3: Support of SSL_OP_IGNORE_UNEXPECTED_EOF context option

From: Date: Thu, 14 Apr 2022 08:59:34 +0000
Subject: [php-src] Issue #8369: OpenSSL 3: Support of SSL_OP_IGNORE_UNEXPECTED_EOF context option
Groups: php.bugs 
Request: Send a blank email to php-bugs+get-240948@lists.php.net to get a copy of this message
Issue: https://github.com/php/php-src/issues/8369 Author: nrueckmann ### Description OpenSSL became more strict about unexpected EOF (not sending close notify) in 1.1.1e but reverted that change in 1.1.1f due to the huge amount of non-compliant servers. With the new major release 3.0.0 it came back. See https://github.com/openssl/openssl/issues/11378 for more details. Unfortunately, the situation of non-compliant servers did not change. And with OpenSSL 3 being the default version of Ubuntu 22.04 (and other distributions) the issue will raise more frequently. I propose to add a new SSL context option ignore_unexpected_eof to set the SSL_OP_IGNORE_UNEXPECTED_EOF bit. Documentation: https://www.openssl.org/docs/manmaster/man3/SSL_CTX_set_options.html#SSL_OP_IGNORE_UNEXPECTED_EOF

« previous php.bugs (#240948) next »