Bug #53850 [Com]: openssl_pkey_export() with password not protecting private key
| From: | edvinas dot gure at gmail dot com | Date: | Thu, 14 Dec 2023 17:58:29 +0000 |
| Subject: | Bug #53850 [Com]: openssl_pkey_export() with password not protecting private key | ||
| References: | 1 | Groups: | php.bugs |
| Request: | Send a blank email to php-bugs+get-246048@lists.php.net to get a copy of this message | ||
Edit report at https://bugs.php.net/bug.php?id=53850&edit=1
ID: 53850
Comment by: edvinas dot gure at gmail dot com
Reported by: jason dot gerfen at gmail dot com
Summary: openssl_pkey_export() with password not protecting
private key
Status: No Feedback
Type: Bug
Package: OpenSSL related
Operating System: arch linux x86_64
PHP Version: 5.3.5
Block user comment: N
Private report: N
New Comment:
Why this issue is ignored? There's still no way to generate PKCS#1 format key.
Previous Comments:
------------------------------------------------------------------------
[2013-02-18 00:34:40] php-bugs at lists dot php dot net
No feedback was provided. The bug is being suspended because
we assume that you are no longer experiencing the problem.
If this is not the case and you are able to provide the
information that was requested earlier, please do so and
change the status of the bug back to "Open". Thank you.
------------------------------------------------------------------------
[2011-11-16 14:27:35] felipe@php.net
Any news on this?
------------------------------------------------------------------------
[2011-03-08 21:27:16] jason dot gerfen at gmail dot com
On another note. Using strictly SSL commands to generate a new private key using both openssl-0.9.8x
& openssl-1.0.0x (installed from source) produce a valid password protected private key.
------------------------------------------------------------------------
[2011-02-16 17:19:54] jason dot gerfen at gmail dot com
Can I get an update on this status?
------------------------------------------------------------------------
[2011-01-31 15:18:56] jason dot gerfen at gmail dot com
Since I have not heard anything else about this I did some digging to try and identify the problem.
I have been adding some warning output in the 'openssl-1.0.0c/crypto/pem/pem_pkey.c' file
after reviewing the the 'php-5.3.5/ext/openssl/openssl.c' file and noticing and focusing
on the calls to the OpenSSL shared objects for 'PEM_write_bio_PrivateKey()'.
When adding the warning output flags in the 'OpenSSL-1.0.0c/crypt/pem/pem_pkey.c' the
password argument would always display as '(null)'.
Correct me if I am looking the wrong spot in helping identify the problem.
------------------------------------------------------------------------
The remainder of the comments for this report are too long. To view
the rest of the comments, please view the bug report online at
https://bugs.php.net/bug.php?id=53850
--
Edit this bug report at https://bugs.php.net/bug.php?id=53850&edit=1