[php-src] Issue #8369: OpenSSL 3: Support of SSL_OP_IGNORE_UNEXPECTED_EOF context option
| From: | nrueckmann | Date: | Thu, 14 Apr 2022 08:59:34 +0000 |
| Subject: | [php-src] Issue #8369: OpenSSL 3: Support of SSL_OP_IGNORE_UNEXPECTED_EOF context option | ||
| Groups: | php.bugs | ||
| Request: | Send a blank email to php-bugs+get-240948@lists.php.net to get a copy of this message | ||
Issue: https://github.com/php/php-src/issues/8369
Author: nrueckmann
### Description
OpenSSL became more strict about unexpected EOF (not sending close notify) in 1.1.1e but reverted
that change in 1.1.1f due to the huge amount of non-compliant servers. With the new major release
3.0.0 it came back. See https://github.com/openssl/openssl/issues/11378
for more details.
Unfortunately, the situation of non-compliant servers did not change. And with OpenSSL 3 being the
default version of Ubuntu 22.04 (and other distributions) the issue will raise more frequently.
I propose to add a new SSL context option
ignore_unexpected_eof to set the
SSL_OP_IGNORE_UNEXPECTED_EOF bit.
Documentation: https://www.openssl.org/docs/manmaster/man3/SSL_CTX_set_options.html#SSL_OP_IGNORE_UNEXPECTED_EOF