From: seanius at debian dot org
Operating system: Debian GNU/Linux
PHP version: 4.4.4
PHP Bug Type: OpenSSL related
Bug description: openssl ciphers not properly initialized in 4.4.4
Description:
------------
in php4 4.4.4x and later using openssl 0.9.8a and later, ssl protocols are
not available to functions like readfile() et al. this is because the list
of ciphers are not properly initialized in ext/openssl/openssl.c
the patch provided in php bug #38798 solves the problem correctly.
note that this problem is also the cause of php bug #35160,
which imho was wrongly closed.
the rationale that "it must be a problem with the precompiled openssl
libs, because it compiles fine with a fresh openssl and the latest 5.x
php"
was particularly amusing, because in the latest php 5.x
code the patch from #38798 has already been applied, whereas it has not
been applied yet in 4.4.4 :)
Reproduce code:
---------------
readfile("https://www.google.com";);
Expected result:
----------------
html content
Actual result:
--------------
copelandia[~]18:56:21$ php4 foo.php
Warning: readfile(): php_stream_sock_ssl_activate_with_method: failed to
create an SSL context in /home/seanius/foo.php on line 2
Warning: readfile(https://www.google.com): failed to open stream: Unable
to activate SSL mode in /home/seanius/foo.php on line 2
--
Edit bug report at http://bugs.php.net/?id=39336&edit=1
--
Try a CVS snapshot (PHP 4.4):
http://bugs.php.net/fix.php?id=39336&r=trysnapshot44
Try a CVS snapshot (PHP 5.2):
http://bugs.php.net/fix.php?id=39336&r=trysnapshot52
Try a CVS snapshot (PHP 6.0):
http://bugs.php.net/fix.php?id=39336&r=trysnapshot60
Fixed in CVS: http://bugs.php.net/fix.php?id=39336&r=fixedcvs
Fixed in release:
http://bugs.php.net/fix.php?id=39336&r=alreadyfixed
Need backtrace: http://bugs.php.net/fix.php?id=39336&r=needtrace
Need Reproduce Script: http://bugs.php.net/fix.php?id=39336&r=needscript
Try newer version: http://bugs.php.net/fix.php?id=39336&r=oldversion
Not developer issue: http://bugs.php.net/fix.php?id=39336&r=support
Expected behavior: http://bugs.php.net/fix.php?id=39336&r=notwrong
Not enough info:
http://bugs.php.net/fix.php?id=39336&r=notenoughinfo
Submitted twice:
http://bugs.php.net/fix.php?id=39336&r=submittedtwice
register_globals: http://bugs.php.net/fix.php?id=39336&r=globals
PHP 3 support discontinued: http://bugs.php.net/fix.php?id=39336&r=php3
Daylight Savings: http://bugs.php.net/fix.php?id=39336&r=dst
IIS Stability: http://bugs.php.net/fix.php?id=39336&r=isapi
Install GNU Sed: http://bugs.php.net/fix.php?id=39336&r=gnused
Floating point limitations: http://bugs.php.net/fix.php?id=39336&r=float
No Zend Extensions: http://bugs.php.net/fix.php?id=39336&r=nozend
MySQL Configuration Error: http://bugs.php.net/fix.php?id=39336&r=mysqlcfg
