#34301 [NEW]: Signing algorithm selection
| From: | diogoko at gmail dot com | Date: | Tue, 30 Aug 2005 01:11:46 +0000 |
| Subject: | #34301 [NEW]: Signing algorithm selection | ||
| Groups: | php.bugs | ||
| Request: | Send a blank email to php-bugs+get-84162@lists.php.net to get a copy of this message | ||
From: diogoko at gmail dot com
Operating system:
PHP version: 4CVS-2005-08-30 (CVS)
PHP Bug Type: OpenSSL related
Bug description: Signing algorithm selection
Description:
------------
Add a signature_algo parameter to the openssl_sign and openssl_verify
functions. This parameter would specify the digest algorithm to be used
when signing or verifying a signature.
Currently, both functions are limited to the sha1 digest algorithm, even
thought the OpenSSL C library supports at least other three algorithms
(md2, md4, md5).
Actually, openssl_sign seems to have all that is needed to support a
(somehow currently ignored) signature_algo parameter, as can be seen in
the CVS. On the other hand, openssl_verify is hardcoded to only use sha1.
--
Edit bug report at http://bugs.php.net/?id=34301&edit=1
--
Try a CVS snapshot (php4): http://bugs.php.net/fix.php?id=34301&r=trysnapshot4
Try a CVS snapshot (php5.0): http://bugs.php.net/fix.php?id=34301&r=trysnapshot50
Try a CVS snapshot (php5.1): http://bugs.php.net/fix.php?id=34301&r=trysnapshot51
Fixed in CVS: http://bugs.php.net/fix.php?id=34301&r=fixedcvs
Fixed in release: http://bugs.php.net/fix.php?id=34301&r=alreadyfixed
Need backtrace: http://bugs.php.net/fix.php?id=34301&r=needtrace
Need Reproduce Script: http://bugs.php.net/fix.php?id=34301&r=needscript
Try newer version: http://bugs.php.net/fix.php?id=34301&r=oldversion
Not developer issue: http://bugs.php.net/fix.php?id=34301&r=support
Expected behavior: http://bugs.php.net/fix.php?id=34301&r=notwrong
Not enough info: http://bugs.php.net/fix.php?id=34301&r=notenoughinfo
Submitted twice: http://bugs.php.net/fix.php?id=34301&r=submittedtwice
register_globals: http://bugs.php.net/fix.php?id=34301&r=globals
PHP 3 support discontinued: http://bugs.php.net/fix.php?id=34301&r=php3
Daylight Savings: http://bugs.php.net/fix.php?id=34301&r=dst
IIS Stability: http://bugs.php.net/fix.php?id=34301&r=isapi
Install GNU Sed: http://bugs.php.net/fix.php?id=34301&r=gnused
Floating point limitations: http://bugs.php.net/fix.php?id=34301&r=float
No Zend Extensions: http://bugs.php.net/fix.php?id=34301&r=nozend
MySQL Configuration Error: http://bugs.php.net/fix.php?id=34301&r=mysqlcfg