summaryrefslogtreecommitdiff
path: root/ext/openssl
Commit message (Collapse)AuthorAgeFilesLines
* Fix bug #79601 (Wrong ciphertext/tag in AES-CCM encryption for a 12 bytes IV)Stanislav Malyshev2020-09-264-22/+57
|
* Fixed bug #78775Nikita Popov2019-11-051-0/+2
| | | | | | Clear the OpenSSL error queue before performing SSL stream operations. As we don't control all code that could possibly be using OpenSSL, we can't rely on the error queue being empty.
* Fixed bug #78231Nikita Popov2019-07-031-1/+2
|
* Fix PKCS12 leak in opensslNikita Popov2019-06-211-2/+3
|
* Fix d leak in ecc openssl_pkey_newNikita Popov2019-06-211-1/+6
|
* Fix netscape spki leak in opensslNikita Popov2019-06-211-0/+3
|
* Fix X509 leak in openssl_pkcs7_verify()Nikita Popov2019-06-211-1/+1
|
* Fix CSR leaks in opensslNikita Popov2019-06-211-9/+20
|
* Free cert in php_openssl_load_stream_cafile()Nikita Popov2019-06-211-0/+1
| | | | | X509_STORE_add_cert() increments the refcount of the cert, so we should free it here.
* Fix memory leak in TLS matches_san_listNiklas Keller2019-06-211-0/+6
|
* Clear errors after SSL_CTX_load_verify_locations()Nikita Popov2019-06-031-0/+1
| | | | | We report our own errors here. Make sure these don't clog up the error queue.
* Fix bug #78079 (openssl_encrypt_ccm.phpt fails with OpenSSL 1.1.1c)Jakub Zelenka2019-06-022-4/+13
| | | | It also fixes invalid setting of tag length
* Fix OpenSSL online test for ca contextJakub Zelenka2019-05-051-1/+1
| | | | The php.net is redirected to https so use nginx.org
* Fix uninitialized cert_capturedNikita Popov2019-04-151-1/+1
| | | | This is a legimitimate bug and also shows up under valgrind.
* Speed up TLS wrapper tests when SSLv3 disabledJakub Zelenka2019-03-105-4/+16
| | | | | If SSLv3 is disabled in OpenSSL, then sslv3 is not available so the accept times out. This commit removes the extra accept if SSLv3 is disabled.
* Sync with behavior change in OpenSSL 1.1.1bAnatol Belski2019-02-281-1/+1
| | | | | | | A behavior change in revealed by some openssl_decrypt() based test, where an encrypt API is used with a decrypt context. The EVP_Cipher* functions will automatically choose the right operation depending on the context passed.
* Print empty string in test for but 77390 just onceJakub Zelenka2019-02-241-2/+5
|
* Use spaces instead of tabs in bug 77390 testJakub Zelenka2019-02-241-85/+85
|
* OpenSSL: Improve non-blocking eof testAbyr Valg2019-02-202-12/+35
|
* Fix bug #77390 (feof might hang on TLS streams in case of fragmented TLS ↵Jakub Zelenka2019-01-252-24/+21
| | | | | | records) Simplified version of the fix from Abyl Valg so credit to him.
* Update and integrate openssl client proxy testJakub Zelenka2019-01-253-150/+72
|
* Add a test for fragmented SSL packetsAbyr Valg2019-01-252-0/+216
|
* Fix cleaning up after openssl_pkcs7_verify_basic testAlexander Kurilo2019-01-101-3/+1
|
* Generate certs for openssl tests on the flyAlexander Kurilo2019-01-1025-219/+505
| | | | | | | | The idea is to create an easy way to provide a certificate that never expires. In order to make it cross-platform, PHP is used rather than openssl CLI app. Using openssl to generate certificates for tests that test openssl might be not the best idea but pros seem to outweight cons that this "recursice dependency" adds
* Regenerate certs for openssl testsAlexander Kurilo2018-12-315-44/+91
|
* Regenerate certificates for openssl testsAlexander Kurilo2018-12-024-73/+58
|
* Sync leading and final newlines in *.phpt sectionsPeter Kokot2018-10-1525-28/+4
| | | | | | | | | | | | | | | | | | | | | | | This patch adds missing newlines, trims multiple redundant final newlines into a single one, and trims redundant leading newlines in all *.phpt sections. According to POSIX, a line is a sequence of zero or more non-' <newline>' characters plus a terminating '<newline>' character. [1] Files should normally have at least one final newline character. C89 [2] and later standards [3] mention a final newline: "A source file that is not empty shall end in a new-line character, which shall not be immediately preceded by a backslash character." Although it is not mandatory for all files to have a final newline fixed, a more consistent and homogeneous approach brings less of commit differences issues and a better development experience in certain text editors and IDEs. [1] http://pubs.opengroup.org/onlinepubs/9699919799/basedefs/V1_chap03.html#tag_03_206 [2] https://port70.net/~nsz/c/c89/c89-draft.html#2.1.1.2 [3] https://port70.net/~nsz/c/c99/n1256.html#5.1.1.2
* Trim trailing whitespace in *.phptPeter Kokot2018-10-1434-60/+60
|
* Sync leading and final newlines in source code filesPeter Kokot2018-10-141-2/+0
| | | | | | | | | | | | | | | | | | | | | | This patch adds missing newlines, trims multiple redundant final newlines into a single one, and trims redundant leading newlines. According to POSIX, a line is a sequence of zero or more non-' <newline>' characters plus a terminating '<newline>' character. [1] Files should normally have at least one final newline character. C89 [2] and later standards [3] mention a final newline: "A source file that is not empty shall end in a new-line character, which shall not be immediately preceded by a backslash character." Although it is not mandatory for all files to have a final newline fixed, a more consistent and homogeneous approach brings less of commit differences issues and a better development experience in certain text editors and IDEs. [1] http://pubs.opengroup.org/onlinepubs/9699919799/basedefs/V1_chap03.html#tag_03_206 [2] https://port70.net/~nsz/c/c89/c89-draft.html#2.1.1.2 [3] https://port70.net/~nsz/c/c99/n1256.html#5.1.1.2
* Trim trailing whitespace in source code filesPeter Kokot2018-10-134-8/+8
|
* Backport changes for OpenSSL 1.1.1 CI integrationAnatol Belski2018-09-131-1/+12
| | | | | | | | | | | | | | | | | | | | | | Add debug message for failing test parts (cherry picked from commit a45169a6ba54b13484d70cb474679c96347f779b) Show all unmatched errors when test failed (cherry picked from commit 70159652541c62b5f3bbb26da76b7e56987b2544) More possibly colliding libs to remove from the test image (cherry picked from commit 3008ad1a49210e4604522a987cbdd27a5a0a2c42) Remove colliding file from CI image (cherry picked from commit 6220d21c3420ff0d7366d410920ba5279fba3893) Fix typo (cherry picked from commit 24517d82cf8dc708d08bc77435ad418de4bdff4e)
* Merge branch 'PHP-7.1' into PHP-7.2Anatol Belski2018-09-121-2/+2
|\ | | | | | | | | * PHP-7.1: Improve error code matching
| * Improve error code matchingAnatol Belski2018-09-121-2/+2
| |
* | Merge branch 'PHP-7.1' into PHP-7.2Jakub Zelenka2018-09-091-2/+6
|\ \ | |/
| * Fix ssl stream reneg limit test to print only after first renegotiationJakub Zelenka2018-09-091-2/+6
| | | | | | | | | | It has been reported that in some setup the test does multiple renegotiations which is allowed.
* | Fix stream_security_level.phpt with OpenSSL 1.1.1Jakub Zelenka2018-09-021-1/+3
| |
* | Merge branch 'PHP-7.1' into PHP-7.2Jakub Zelenka2018-08-193-2/+97
|\ \ | |/
| * Fix bug #76705 (unusable ssl => peer_fingerprint in stream_context_create())Jakub Zelenka2018-08-193-2/+97
| |
* | Make new openssl ext tests in 7.2 consitentJakub Zelenka2018-06-212-0/+5
| |
* | Merge branch 'PHP-7.1' into PHP-7.2Jakub Zelenka2018-06-2188-708/+780
|\ \ | |/
| * Use unix NL in all openssl ext testsJakub Zelenka2018-06-213-126/+126
| |
| * Make code in openssl ext tests more consistentJakub Zelenka2018-06-2188-629/+708
| | | | | | | | | | Mainly use spaces for indent and fix some other CS issues. Also drop checks for unsupported OpenSSL library versions.
* | Merge branch 'PHP-7.1' into PHP-7.2Jakub Zelenka2018-05-223-13/+32
|\ \ | |/
| * Fix bug #76174 (openssl extension fails to build with LibreSSL 2.7)Jakub Zelenka2018-05-223-13/+32
| |
* | Merge branch 'PHP-7.1' into PHP-7.2Jakub Zelenka2018-05-182-3/+25
|\ \ | |/
| * Add test for bug #76296Jakub Zelenka2018-05-181-0/+22
| |
| * Fix bug #76296 (openssl_pkey_get_public does not respect open_basedir)Erik Lax2018-05-181-3/+3
| |
* | Merge branch 'PHP-7.1' into PHP-7.2Jakub Zelenka2018-04-151-5/+8
|\ \ | |/
| * Make openssl_error_string test work in OpenSSL 1.1.1Jakub Zelenka2018-04-151-5/+8
| | | | | | | | It was the only failing test
* | Merge branch 'PHP-7.1' into PHP-7.2Christoph M. Becker2018-02-231-3/+5
|\ \ | |/ | | | | | | * PHP-7.1: Fix some arginfos
View Lorry Controller Status