From:             hotte at unrealforum dot de
Operating system: Linux Gentoo 2.6.7
PHP version:      5.0.0
PHP Bug Type:     OpenSSL related
Bug description:  SSL connection failed

Description:
------------
I've tried to etablish a ssl-connection with the php-cli to a rrp-server
(http://www.ietf.org/rfc/rfc2832.txt?number=2832) with fsockopen but
receive "SSL handshake/connection failed"
A connect with openssl is successfull:

openssl s_client -ssl3 -crlf -connect host:648


New, TLSv1/SSLv3, Cipher is DES-CBC3-SHA
Server public key is 1024 bit
SSL-Session:
    Protocol  : SSLv3
    Cipher    : DES-CBC3-SHA
    Session-ID:
77752169E6CCC2EE44C4A5BADFD93A074D041FA8D0E8A5285810312F2DEBD43E
    Session-ID-ctx:
    Master-Key:
58F8FE9AA2CE1D5A731D3A7207889503A79254DC3BE6D1C8DE3B94EB4E634317D7CC084CA29BBE7218F587967EA099B6
    Key-Arg   : None
    Start Time: 1090407338
    Timeout   : 7200 (sec)
    Verify return code: 19 (self signed certificate in certificate chain)
---


PHP configure:

'./configure' '--prefix=/usr' '--host=i686-pc-linux-gnu'
'--mandir=/usr/share/man' '--infodir=/usr/share/info'
'--datadir=/usr/share' '--sysconfdir=/etc' '--localstatedir=/var/lib'
'--with-apxs2=/usr/sbin/apxs2'
'--with-config-file-path=/etc/php/apache2-php5' '--without-pear'
'--disable-bcmath' '--without-bz2' '--disable-calendar'
'--without-cpdflib' '--disable-ctype' '--without-curl'
'--without-curlwrappers' '--disable-dbase' '--disable-dbx' '--disable-dio'
'--disable-exif' '--with-fam' '--without-fbsql' '--without-fdftk'
'--disable-filepro' '--disable-ftp' '--with-gettext' '--without-gmp'
'--without-hwapi' '--without-iconv' '--without-informix'
'--without-ingres' '--without-interbase' '--enable-mbstring'
'--with-mcrypt' '--without-mcve' '--without-mhash' '--without-ming'
'--without-mnogosearch' '--without-msql' '--without-mssql'
'--with-ncurses' '--without-oci8' '--without-oracle' '--with-openssl'
'--without-ovrimos' '--without-pcre-regx' '--without-pfpro'
'--without-pgsql' '--disable-posix' '--with-pspell' '--without-recode'
'--disable-simplexml' '--without-snmp' '--disable-soap'
'--disable-sockets' '--disable-spl' '--without-sybase'
'--without-sybase-ct' '--disable-sysvmsg' '--disable-sysvsem'
'--disable-sysvshm' '--without-tidy' '--disable-tokenizer'
'--disable-wddx' '--without-xsl' '--with-xmlrpc' '--disable-yp'
'--with-zlib' '--without-cdb' '--with-db4' '--without-dbm'
'--without-flatfile' '--with-gdbm' '--without-inifile' '--without-qdbm'
'--with-gd' '--enable-gd-jis-conf' '--enable-gd-native-ttf' '--with-ldap'
'--without-ldap-sasl' '--with-mysql' '--disable-session'
'--without-sqlite' '--enable-dba' '--with-readline' '--without-libedit'


SSL connections to other Mail/Webserver works fine.

Reproduce code:
---------------
$fd     =       fsockopen("ssl://host,648);
or
$fd     =       fsockopen("tls://host,648);

Expected result:
----------------
a successfull connection

Actual result:
--------------
Warning: fsockopen(): SSL operation failed with code 1. OpenSSL Error
messages:
error:1408F10B:SSL routines:func(143):reason(267) in test.php on line 3

Warning: fsockopen(): Failed to enable crypto in test.php on line 3

Warning: fsockopen(): unable to connect to tls://host:648 (Unknown error)
in test.php on line 3

-- 
Edit bug report at http://bugs.php.net/?id=29296&edit=1
-- 
Try a CVS snapshot (php4):  http://bugs.php.net/fix.php?id=29296&r=trysnapshot4
Try a CVS snapshot (php5):  http://bugs.php.net/fix.php?id=29296&r=trysnapshot5
Fixed in CVS:               http://bugs.php.net/fix.php?id=29296&r=fixedcvs
Fixed in release:           http://bugs.php.net/fix.php?id=29296&r=alreadyfixed
Need backtrace:             http://bugs.php.net/fix.php?id=29296&r=needtrace
Need Reproduce Script:      http://bugs.php.net/fix.php?id=29296&r=needscript
Try newer version:          http://bugs.php.net/fix.php?id=29296&r=oldversion
Not developer issue:        http://bugs.php.net/fix.php?id=29296&r=support
Expected behavior:          http://bugs.php.net/fix.php?id=29296&r=notwrong
Not enough info:            http://bugs.php.net/fix.php?id=29296&r=notenoughinfo
Submitted twice:            http://bugs.php.net/fix.php?id=29296&r=submittedtwice
register_globals:           http://bugs.php.net/fix.php?id=29296&r=globals
PHP 3 support discontinued: http://bugs.php.net/fix.php?id=29296&r=php3
Daylight Savings:           http://bugs.php.net/fix.php?id=29296&r=dst
IIS Stability:              http://bugs.php.net/fix.php?id=29296&r=isapi
Install GNU Sed:            http://bugs.php.net/fix.php?id=29296&r=gnused
Floating point limitations: http://bugs.php.net/fix.php?id=29296&r=float

Reply via email to