php56-mysqli needs dhparam support
| From: | Tim Gustafson | Date: | Thu, 18 Jun 2015 21:40:55 +0000 |
| Subject: | php56-mysqli needs dhparam support | ||
| Groups: | php.db | ||
| Request: | Send a blank email to php-db+get-49042@lists.php.net to get a copy of this message | ||
Hi,
It appears that the php56-mysqli port uses a weak dhparam which is
causing SSL connections from PHP mysqli clients to fail when
connecting to a FreeBSD MySQL 5.6 server that requires SSL.
For example, from my web server I can run "mysql" from the command
line, and am able to connect to the server just fine. But when I
attempt to connect to the same database server from the same host
using the PHP library, I get:
Warning: mysqli::real_connect(): SSL operation failed with code 1.
OpenSSL Error messages:
error:14082174:SSL routines:SSL3_CHECK_CERT_AND_ALGORITHM:dh key too
small in database-connection.php on line 33
I tried adding:
[OpenSSL]
dh_param = /etc/ssl/dh-2048.pem
to php.ini per the PHP documentation related to the OpenSSL library,
but that did not seem to help. Is there some way to specify a dhparam
file to be used by php56-mysqli?
--
Tim Gustafson
tjg@ucsc.edu
831-459-5354
Baskin Engineering, Room 313A