[php-src] Issue #8369: OpenSSL 3: Support of SSL_OP_IGNORE_UNEXPECTED_EOF context option
| From: | nrueckmann | Date: | Sat, 30 Apr 2022 21:41:31 +0000 |
| Subject: | [php-src] Issue #8369: OpenSSL 3: Support of SSL_OP_IGNORE_UNEXPECTED_EOF context option | ||
| Groups: | php.bugs | ||
| Request: | Send a blank email to php-bugs+get-241351@lists.php.net to get a copy of this message | ||
Issue: https://github.com/php/php-src/issues/8369
Comment Author: nrueckmann
> Although maybe not the best idea to always add that option as it can potentially lead to the
> truncation attack so we might just make it optional somehow. Will need to think about it when I get
> to it.
That's the feature request i've tried to describe. Having an option which can be
(optionally) passed to the context. Same like we are doing with all other options
(https://www.php.net/manual/en/context.ssl.php).