Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

OPENSSL_SSLV23_PADDING is optional #88

Closed
remicollet opened this issue Sep 27, 2021 · 14 comments
Closed

OPENSSL_SSLV23_PADDING is optional #88

remicollet opened this issue Sep 27, 2021 · 14 comments

Comments

@remicollet
Copy link
Contributor

remicollet commented Sep 27, 2021

When build with new OpenSSL 3.0

See php/php-src@a0972de#diff-c85372ee14ed2a3e599bc555e3d245e4cd654e4a57f250ba927701dd8b61d102

There was 1 failure:
1) Bartlett\CompatInfoDb\Tests\Reference\Extension\PhpBundle\Openssl\OpensslExtensionTest::testGetConstantsFromReference
Constant 'OPENSSL_SSLV23_PADDING', found in Reference (4.0.4, ), does not exists.
Failed asserting that false is true.
/builddir/build/BUILD/php-compatinfo-db-f71dbe522b3075505cb5221d3f29b8fb3863dd47/tests/Reference/GenericTest.php:649

@llaville
Copy link
Owner

@remicollet Can you check/test the fixe on new branch openssl_v3 and validate it please ?

@remicollet
Copy link
Contributor Author

@llaville
Copy link
Owner

After reading the build.log I noticed that you run test on PHP 8.0
But in php/php-src@a0972de#diff-c85372ee14ed2a3e599bc555e3d245e4cd654e4a57f250ba927701dd8b61d102 its tagged at least for PHP 8.1.0beta3

I don't understand. If you can explains my misunderstood, I'd like a lot !

@remicollet
Copy link
Contributor Author

I don't understand. If you can explains my misunderstood, I'd like a lot !

As Fedora Have OpenSSL 3.0n the needed stuff have been backported from 8.1 to 8.0

@llaville
Copy link
Owner

I'm sorry, but I follow PHP original source code changes.
As It's specific to Fedora, I suggest you to add a patch by changing value of ext-min and php-min https://github.com/llaville/php-compatinfo-db/blob/c4eeca6b55b916868e45f4efbfcf30b4e8f095c8/data/reference/extension/openssl/81/constants.json

@remicollet
Copy link
Contributor Author

BTW, the constraint is bad.

-                "constraint": ">=3.0.0"
+                "constraint": "<3.0.0"

@remicollet
Copy link
Contributor Author

See pr #89

@llaville
Copy link
Owner

if support is to add optional constant for OpenSSL 3.0, then the constraint is truly >=3.0.0, or I don't really understand reason of your PR 7002 on php-src

@remicollet
Copy link
Contributor Author

This is NOT a new constant
The constant exists since PHP 4.0.4, and is really optional, ie removed when PHP is build with OpenSSL 3.0.0

"SSLV23" is terribly old and insecure...

@remicollet
Copy link
Contributor Author

@remicollet
Copy link
Contributor Author

Perhaps simpler / better, to add the constraint in data/reference/extension/openssl/40/constants.json

@llaville
Copy link
Owner

The constant exists since PHP 4.0.4, and is really optional, ie removed when PHP is build with OpenSSL 3.0.0

This explain is more usefull for me. I understand now, and I agree constraint is <3.0.0. I will fix it on base **openssl/40/constants.json". You can close your PR 89

@llaville
Copy link
Owner

I'll merge it on master if it's statisfy your tests !

@remicollet
Copy link
Contributor Author

Yes new patch is OK.

llaville added a commit that referenced this issue Sep 27, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants