Improve openssl ext to generate EC keys with custom EC parameters

This change extends supported parameter when generating EC keys.

Specifically following parameters are now supporte

Improve openssl ext to generate EC keys with custom EC parameters

This change extends supported parameter when generating EC keys.

Specifically following parameters are now supported: p, a, b, order,
generator, seed, cofactory, g_x, g_y, x, y and d.

Those parameters can be passed to ec field in openssl_pkey_new options.

It also fixes some issues openssl_pkey_get_details related to SM2
support.

Closes GH-9991

show more ...

Fix GH-11054: Reset OpenSSL errors when using a PEM public key

The error happens when the PEM contains a public key, as it will be
first tried to be parsed as a certificate. The parsing

Fix GH-11054: Reset OpenSSL errors when using a PEM public key

The error happens when the PEM contains a public key, as it will be
first tried to be parsed as a certificate. The parsing as a certificate
fails, which then leads to a corresponding error tracked by PHP with
the next call to php_openssl_store_errors().

This change introduces an error marking to be able to reset the stored
errors to the state before trying the certificate.

Closes GH-11055

show more ...

Add missing error check on PEM_write_bio_PKCS7()

Closes GH-10752.

Add missing error check on PEM_write_bio_CMS()

On failure, this function returns 0. 2 other callers of this function
already check the return value, but this one was missed.

Add missing error check on i2d_PKCS12_bio()

This function returns 0 on error and 1 on success. The error case was
not checked and the function therefore would've returned true.
The o

Add missing error check on i2d_PKCS12_bio()

This function returns 0 on error and 1 on success. The error case was
not checked and the function therefore would've returned true.
The only other caller of i2d_PKCS12_bio() in the file has
a correct error check.

Closes GH-10761.

show more ...

Fix GCC 12 compiler warnings (#10713)

* Fix -Wunused-but-set-variable compiler warning in ext/mysqli

* Fix -Wstrict-prototypes compiler warning in ext/mysqlnd

* Fix -Wstric

Fix GCC 12 compiler warnings (#10713)

* Fix -Wunused-but-set-variable compiler warning in ext/mysqli

* Fix -Wstrict-prototypes compiler warning in ext/mysqlnd

* Fix -Wstrict-prototypes compiler warning in ext/soap

* Fix -Wunused-but-set-variable compiler warning in ext/exif

However, this code looks really sketchy...

* Fix -Wstrict-prototypes compiler warning in ext/openssl

* Fix -Wstrict-prototypes compiler warning in ext/dba

Add void to our bundled libraries

* Refactor bundled BCMath library

Fix -Wdeprecated-non-prototype compiler warnings
Use bool instead of char/int
Cleanup some useless header includes

show more ...

Use zend_result where appropriate in ext/openssl
Remove dead code

s is always NULL, so the check is always false.

Closes GH-10704.

Revert "Merge branch 'PHP-8.0' into PHP-8.1"

This reverts commit 0116864cd312f9756f38a0ee0f83bb302a7e367b, reversing
changes made to 1f715f5658f5909a9346f56812fa605744d23880.

Revert "Make build work with newer OpenSSL"

This reverts commit 5f90134bb69a345c7edb5013e6461e84caa32dbc.

Make build work with newer OpenSSL

Fix GH-10000: Test failures when OpenSSL compiled with no-dsa

Fix GH-9064: PHP fails to build if openssl was built with no-ec

Fix GH-9997: OpenSSL engine clean up segfault

Fix OpenSSL conflicting merge for compilation issue with old digests

Fix GH-8430: OpenSSL compiled with old disgests does not build

Specifically no-md2, no-md4 or no-rmd160 were not supported

Clean up OpenSSL engine list when OpenSSL 1.0.2 used

Attempt to fix GH-8620.

Revert "Port all internally used classes to use default_object_handlers"

This reverts commit 94ee4f9834743ca74f6c9653863273277ce6c61a.

The commit was a bit too late to be included i

Revert "Port all internally used classes to use default_object_handlers"

This reverts commit 94ee4f9834743ca74f6c9653863273277ce6c61a.

The commit was a bit too late to be included in PHP 8.2 RC1. Given it's a massive ABI break, we decide to postpone the change to PHP 8.3.

show more ...

Fix bug GH-9517: Compilation error in openssl extension

Port all internally used classes to use default_object_handlers

Signed-off-by: Bob Weinand <bobwei9@hotmail.com>

Add openssl_cipher_key_length function

This function works in exactly the same way as openssl_cipher_iv_length
but for a key length. This is especially useful to make sure that the
r

Add openssl_cipher_key_length function

This function works in exactly the same way as openssl_cipher_iv_length
but for a key length. This is especially useful to make sure that the
right key length is provided to openssl_encrypt and openssl_decrypt.

In addtion the change also updates implementation of
openssl_cipher_iv_length and adds a test for it.

show more ...

Implement FR #76935: OpenSSL chacha20-poly1305 AEAD support

This adds support for ChaCha20-Poly1305 AEAD algorithm so it is possible
to use it in the same way as AES GCM and other AEAD a

Implement FR #76935: OpenSSL chacha20-poly1305 AEAD support

This adds support for ChaCha20-Poly1305 AEAD algorithm so it is possible
to use it in the same way as AES GCM and other AEAD algorithms. This is
available in OpenSSL 1.1.0+.

show more ...

Fix GH-9310: SSL local_cert and local_pk do not respect open_basedir restriction

Fix GH-9339: OpenSSL oid_file path check warning contains uninitialized path

Drop Windows specific implementation of openssl_random_pseudo_bytes()

Despite commit 69c3f8c[1] claiming otherwise, there is no need for any
Windows specific implementation here. Users

Drop Windows specific implementation of openssl_random_pseudo_bytes()

Despite commit 69c3f8c[1] claiming otherwise, there is no need for any
Windows specific implementation here. Users can use random_bytes(), if
they desire so.

[1] <https://github.com/php/php-src/commit/69c3f8cbbabf313b74fbd29bb2ed268ff7c3e9e1>

Closes GH-9153.

show more ...

Tweak openssl_random_pseudo_bytes() upper bound error message

As suggested by @guilliamxavier.