Re: openssl php 4.3.1
| From: | The Doctor | Date: | Tue, 25 Mar 2003 14:24:39 +0000 |
| Subject: | Re: openssl php 4.3.1 | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-140959@lists.php.net to get a copy of this message | ||
On Mon, Mar 24, 2003 at 11:15:05PM -0500, Kalin Mintchev wrote:
>
> hi all,
>
> i have problems getting fopen() and fsockopen() to work over https..
>
> here is the problem..
>
> from the phpinfo:
>
> OpenSSL support enabled
> OpenSSL Version OpenSSL 0.9.6h 5 Dec 2002
OpenSSL 0.9.6h has a security vulnerability.
PLEASe check http://www.openssl.org
>
> from php -m
>
> # php -m
> [PHP Modules]
> ctype
> mysql
> openssl
> overload
> pcre
> posix
> session
> standard
> tokenizer
> xml
>
> [Zend Modules]
>
>
> from the Appendix I regarding fopen() on php.net:
>
> Note: HTTPS is supported starting from PHP 4.3, if you have compiled in
> support for OpenSSL.
>
> and from the documentation on fsockopen() on php.net:
> As of PHP 4.3.0, if you have compiled in OpenSSL support, you may prefix
> the hostname with either 'ssl://' or 'tls://' to use an SSL or TLS client
> connection over TCP/IP to connect to the remote host.
>
> in a test file i have two lines of code like this:
>
> $file = "https://someurl.com";
> if (!($fp = fopen($file, "r")))
>
> this produces an error but it doesn't point to any problem - like this:
> Warning: fopen(https://someurl.com.......... in /path/to/file.php on line
> 45
>
> if i change $file to "http://someurl.com" it works
> fine...
>
> with fsockopen() the situation is kinda the same. code:
> $fp=fsockopen("ssl://www.foo.com", 443);
>
> error:
> Warning: fsockopen() [function.fsockopen]: no SSL support in this build in
> /path/to/file/...
>
> if i pul out the ssl:// part it works fine...
>
> now, i did read the posts on this list about curl. why curl isn't
> mentioned anywhere in the documentation for fopen() and fsockopen() if
> it's needed for those functions?
> why would i need curl compiled in php if i already have openssl compiled with
> it?
>
> the machine i'm using is a freeBSD 4.6 box with apache 1.3.27 and OpenSSL
> 0.9.6h, php is 4.3.1...
>
> i did similar posts on other php lists but everybody's quite..
>
> thanks
>
>
>
>
> --
> PHP General Mailing List (http://www.php.net/)
> To unsubscribe, visit: http://www.php.net/unsub.php
>
--
Member - Liberal International On 11 Sept 2001 the WORLD was violated.
This is doctor@nl2k.ab.ca Ici doctor@nl2k.ab.ca
Society MUST be saved! Extremists must dissolve.
Quebec - elir les gagnant qui peut deplacer le PQ la plus vite