Use opaque EVP_PKEY in php_openssl_is_private_key

Do not use X509 props directly in openssl_x509_parse

Do not use X509_EXTENSION data directly as it is opaque

Wrap pkey id and rsa getters

Use opaque md ctx in openssl_sign and openssl_verify

Use opaque cipher ctx in openssl_seal and openssl_open

Use opaque EVP_MD_CTX in openssl_digest

Bump minimal OpenSSL version to 1.0.1

Cleanup all SSLv2 code, whatever OpenSSL version is

Fixed compilation warnings

couple of resource leaks fixes and use after free's

Improve openssl ecc keypair support implementation

Adds initial support to generate and work with ECC public key pair

New features:
- openssl_get_curve_names => list ECC curve names
- generate a ECC public key pair
- generate an

Adds initial support to generate and work with ECC public key pair

New features:
- openssl_get_curve_names => list ECC curve names
- generate a ECC public key pair
- generate an CSR with an ECC key
- export x,y,d params of ECC public/private key

Thanks to @bukka for the review and feedback

show more ...

Fixed compilation warnings

Added ZEND_ATTRIBUTE_FORMAT to some middind functions.
"%p" replaced by ZEND_LONG_FMT to avoid compilation warnings.
Fixed most incorrect use cases of format specifiers.

Replace zend_ce_error with NULL and replace more E_ERROR with thrown Error

Fix bug #71915 (openssl_random_pseudo_bytes is not fork-safe)

Add time to the entropy before using RAND_bytes

Fix bug #72336 (openssl_pkey_new does not fail for invalid DSA params)

Fix bug #72140 (segfault after calling ERR_free_strings())

Re-fix #72165

Reverted previous wrong patch, throw warning for numeric keys.
Numeric field names are not supported, see "distinguished name"
section here https://www.openssl.org/docs

Re-fix #72165

Reverted previous wrong patch, throw warning for numeric keys.
Numeric field names are not supported, see "distinguished name"
section here https://www.openssl.org/docs/manmaster/apps/req.html

show more ...

Revert "Fixed bug #72165 Null pointer dereference - openssl_csr_new"

This reverts commit 7277c85765d1053c8cd1d1093902df541b3d101a.

Fixed bug #72165 Null pointer dereference - openssl_csr_new

Correctly store OpenSSL erorrs for encrypt_key

Store OpenSSL errors from CONF_get_string in SET_OPTIONAL_STRING_ARG

Remove TSRMLS_* from code, they are not used anymore