Fix bug #60632: openssl_seal fails with AES

Fix #70395: Missing ARG_INFO for openssl_seal()

This patch adds the missing ARG_INFO for the optional 5th parameter $method.

Use new range checks in openssl ext

Fix bug #55259 (openssl extension does not get the DH parameters from DH key resource)

Add overflow check for openssl_pkcs12_read

Add overflow checks for openssl_pkey_* functions

Move overflow checks in openssl_pbkdf2

Use macros for openssl overflow checks

It reduces code duplications

Fix possible overflow in openssl_pbkdf2

Especially key_length would lead to the crash if it overflowed
to the negative value.

Check and use correct signature_len type for EVP_VerifyFinal

Fix some int overflows in openssl

There might be more. I just did a quick check for enc/dec, rand
and one BN call.

Fix bug #70014 - use RAND_bytes instead of deprecated RAND_pseudo_bytes

fix backport mistake

in 5.6 it has to be explicitly copied to avoid double free

backport c01943bffc8b719e552d307f522820d50f783a4c into 5.6

fix improper behavior

openssl_spki_export() is documented to return string, but it's
obviously not achieved writing it to stdout :)

Use ZSTR_ API to access zend_string elements (this is just renaming without semantick changes).

Fixed #69882: OpenSSL error "key values mismatch" after openssl_pkcs12_read with extra certs

Squashed commit of the following:

commit a64c1d9bc4c129fd946a478bdcb55101e42157b7
Au

Fixed #69882: OpenSSL error "key values mismatch" after openssl_pkcs12_read with extra certs

Squashed commit of the following:

commit a64c1d9bc4c129fd946a478bdcb55101e42157b7
Author: Tomasz Sawicki <falundir@gmail.com>
Date: Wed Jun 24 08:49:37 2015 +0200

Fix #69882: OpenSSL error "key values mismatch" after openssl_pkcs12_read with extra certs

The "key values mismatch" error is triggered in openssl_pkcs12_read by
PKCS12_parse, because it uses X509_check_private_key to separate main
certificate (which corresponds to private key) from extra certificates.
Extra certificates usually comes first (p12 contents are reversed as
stack) and X509_check_private_key triggers X509_R_KEY_VALUES_MISMATCH
error.
The fix pops "key values mismatch" error from OpenSSL error stack for
each extra certificate if there are any.

show more ...

Make convert_to_* safe with rc>1

This only involves switching zval_dtor to zval_ptr_dtor for arrays
and making the convert_to_object for arrays a bit more generic.

All the other

Make convert_to_* safe with rc>1

This only involves switching zval_dtor to zval_ptr_dtor for arrays
and making the convert_to_object for arrays a bit more generic.

All the other changes outside zend_operators.c just make use of
this new ability (use COPY instead of DUP).

What's still missing: Proper references handling. I've seen many
convert_to* calls that will break when a reference is used.

Also fixes bug #69788.

show more ...

Corrected line comment 5256

From the text "dectupt" to "decrypt"

fix _timezone usage for vc14

Update openssl.c

Adding additional checks for sslv3.

Add RAND_egd check for compiling against LibreSSL

Add RAND_egd check for compiling against LibreSSL

cleanup mod version macros, round 3

Use specialized macro for string zval creation