Prevent leaking x509 and csr resources if it is not requested

All functions using php_openssl_x509_from_zval or php_openssl_csr_from_zval
with makeresource equal to 0 do not deref the re

Prevent leaking x509 and csr resources if it is not requested

All functions using php_openssl_x509_from_zval or php_openssl_csr_from_zval
with makeresource equal to 0 do not deref the resource which means there
is a leak till the end of the request. This can cause issues for long
running apps. It is a generic solution for bug #75363 which also covers
other functions.

show more ...

Merge branch 'PHP-7.1' into PHP-7.2

* PHP-7.1:
Fix bug #75307 Wrong reflection for openssl_open function

Merge branch 'PHP-7.0' into PHP-7.1

* PHP-7.0:
Fix bug #75307 Wrong reflection for openssl_open function

Fix bug #75307 Wrong reflection for openssl_open function

Merge branch 'PHP-7.1' into PHP-7.2

Merge branch 'PHP-7.0' into PHP-7.1

Properly fix #75363 and address some other leaks with cert

Merge branch 'PHP-7.1' into PHP-7.2

Merge branch 'PHP-7.0' into PHP-7.1

Fixed bug #75363 (openssl_x509_parse leaks memory)

Automatically load OpenSSL configuration file

Do not explicitly initialize and clean up OpenSSL for OpenSSL 1.1

Followup on 0ec147d3 for another place

which requires also to move the macros into the header

(cherry picked from commit b7eb2c060409a8f5809d6e73f53d88844cf9ed09)

Ensure binary mode for OpenSSL I/O

Essential for OpenSSL 1.1.0 on Windows, some issues was revealed earlier
and now by openssl_pkcs12_export_to_file_basic.phpt.

(cherry picked f

Ensure binary mode for OpenSSL I/O

Essential for OpenSSL 1.1.0 on Windows, some issues was revealed earlier
and now by openssl_pkcs12_export_to_file_basic.phpt.

(cherry picked from commit 0ec147d301b33b2cb0f347c6e81eb7e75e75b521)

show more ...

Followup on 0ec147d3 for another place

which requires also to move the macros into the header

Ensure binary mode for OpenSSL I/O

Essential for OpenSSL 1.1.0 on Windows, some issues was revealed earlier
and now by openssl_pkcs12_export_to_file_basic.phpt.

Make functions in openssl.c more consistent

Improve naming, CS and add some static defs

Merge branch 'PHP-7.1'

* PHP-7.1:
Improve fix for #74145
Fix wddx
Fix tests
Fixed bug #74111
Fix bug #74603 - use correct buffer size
Fix bug #74651 - che

Merge branch 'PHP-7.1'

* PHP-7.1:
Improve fix for #74145
Fix wddx
Fix tests
Fixed bug #74111
Fix bug #74603 - use correct buffer size
Fix bug #74651 - check EVP_SealInit as it can return -1
Update NEWS
Fix bug #74087
Fixed parsing of strange formats with mixed month/day and time strings
Fix bug #74145 - wddx parsing empty boolean tag leads to SIGSEGV
Fixed bug #74111
Fix #74435: Buffer over-read into uninitialized memory
Fix bug #74603 - use correct buffer size
Fix bug #74651 - check EVP_SealInit as it can return -1
Update NEWS
Fix bug #73807

show more ...

Merge branch 'PHP-7.0' into PHP-7.1

* PHP-7.0:
Improve fix for #74145
Fix wddx
Fix tests
Fixed bug #74111
Fix bug #74603 - use correct buffer size
Fix bug

Merge branch 'PHP-7.0' into PHP-7.1

* PHP-7.0:
Improve fix for #74145
Fix wddx
Fix tests
Fixed bug #74111
Fix bug #74603 - use correct buffer size
Fix bug #74651 - check EVP_SealInit as it can return -1
Update NEWS
Fix bug #74087
Fixed parsing of strange formats with mixed month/day and time strings
Fix bug #74145 - wddx parsing empty boolean tag leads to SIGSEGV
Fixed bug #74111
Fix #74435: Buffer over-read into uninitialized memory
Fix bug #74603 - use correct buffer size
Fix bug #74651 - check EVP_SealInit as it can return -1
Update NEWS
Fix bug #73807

show more ...

Fix bug #74651 - check EVP_SealInit as it can return -1

Merge branch 'PHP-7.1'

Add OPENSSL_DONT_ZERO_PAD_KEY constant to prevent key padding

It fixes bug #71917 (openssl_open() returns junk on envelope < 16 bytes)
and bug #72362 (OpenSSL Blowfish encryption is inco

Add OPENSSL_DONT_ZERO_PAD_KEY constant to prevent key padding

It fixes bug #71917 (openssl_open() returns junk on envelope < 16 bytes)
and bug #72362 (OpenSSL Blowfish encryption is incorrect for short
keys).

show more ...

Merge branch 'PHP-7.1'

* PHP-7.1:
Fix bug #74798 pkcs7_en/decrypt does not work if \x0a is used in content

Fix bug #74798 pkcs7_en/decrypt does not work if \x0a is used in content

The patch for bug #74720 was incomplete.

Add openssl_pkcs7_read and output P7B in openssl_pkcs7_verify

Add an optional argument to openssl_pkcs7_verify to save the P7B
structure which can contain extra CA intermediate certifica

Add openssl_pkcs7_read and output P7B in openssl_pkcs7_verify

Add an optional argument to openssl_pkcs7_verify to save the P7B
structure which can contain extra CA intermediate certificates send
along with an S/MIME signed email.

Introduce a new function called openssl_pkcs7_read, which can read a
PKCS#7 structure passed as a string and returns by reference an array
with PEM certificates formatted as a string.

show more ...