summaryrefslogtreecommitdiff
path: root/ext/openssl
Commit message (Collapse)AuthorAgeFilesLines
* Fix possible crash; patch by Kamesh JayachandranWez Furlong2004-10-271-0/+1
|
* Fix for Bug #29418 (double free when openssl_csr_new fails).Wez Furlong2004-10-261-1/+7
| | | | | | | Also hook up MSHUTDOWN function which appears to have never been enabled. Patch by Kamesh Jayachandran
* - Fixed bug #26447 (--with-openssl=shared causes compile errors).NEWSfoobar2003-11-292-5/+9
|
* Fix uninitialized value.Wez Furlong2003-10-131-1/+1
| | | | | Patch from Joe Orton.
* "Fix" for bug #25614.Wez Furlong2003-09-232-5/+22
| | | | | | | | The openssl_pkey_get_public() doesn't work as advertized in the docs; it can't get a public key from a private key (because a key is a key), but would return the private key anyway. The function was originally designed to get the public key from a certificate.
* - Backported several improvements/cleanups for the build/configure stuff.foobar2003-08-272-11/+1
| | | | | | | | . PEAR dependancies checked during configure . OpenSSL config moved from configure.in to ext/openssl/config0.m4 (and also improved the PHP_OPENSSL_SETUP macro a bit) + Some other minor issues
* MFH: fixed certificate version, serial number not always 0.Stefan Roehrich2003-07-131-5/+5
|
* MFHfoobar2003-06-271-1/+1
|
* This commit was manufactured by cvs2svn to create branch 'PHP_4_3'.SVN Migration2003-06-241-0/+17
|
* Fixed compile warnings.Ilia Alshanetsky2003-06-081-3/+3
|
* Avoid potential segfault when preparing an SSL stream.Wez Furlong2003-05-051-1/+1
|
* Really fix dll linkage, and fix TSRMLS usage.Wez Furlong2003-05-012-8/+6
|
* Fix win32 build of shared openssl extension.Wez Furlong2003-04-292-4/+21
|
* MFHIlia Alshanetsky2003-04-281-4/+4
|
* Fix the lack of SSL certificate verification support for ssl:// sockets andWez Furlong2003-04-262-0/+231
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | https:// streams. This code is essential for people writing secure applications in order to avoid man-in-the-middle attacks, and is thus regarded as a bug fix. It is, however, optional; you need to explicitly turn on the verification functionality, as it depends on you to specify your trusted certificate chain. This sample demonstrates a secured https:// request, making use of the CA bundle provided by curl: <?php $ctx = stream_context_create(); // Turn on verification stream_context_set_option($ctx, "ssl", "verify_peer", true); // Set the CA bundle (trusted certificate chain) stream_context_set_option($ctx, "ssl", "cafile", "/usr/local/share/curl/curl-ca-bundle.crt"); $fp = fopen("https://www.zend.com", "rb", false, $ctx); ?> This sample demonstrates how to roll your own https:// request, and specify a certificate to use for authentication; the local_cert and passphrase options will also work for fopen(). <?php $ctx = stream_context_create(); stream_context_set_option($ctx, "ssl", "verify_peer", true); stream_context_set_option($ctx, "ssl", "cafile", "/usr/local/share/curl/curl-ca-bundle.crt"); // set local cert. it MUST be a PEM encoded file containing the certificate // AND your private key. It can also contain the certificate chain of issuers. stream_context_set_option($ctx, "ssl", "local_cert", "/path/to/my/cert.pem"); stream_context_set_option($ctx, "ssl", "passphrase", "secret!"); // Set the common name that we are expecting; PHP will perform limited wildcard // matching. If the CN does not match this, the connection attempt will fail. // The value to specify will always be the same as the Host: header you specify. stream_context_set_option($ctx, "ssl", "CN_match", "secure.sample.domain"); $ssl = fsockopen("ssl://secure.sample.domain", 443, $errno, $errstr, 10, $ctx); if ($ssl) { fwrite($ssl, "GET / HTTP/1.0\r\nHost: secure.sample.domain\r\n\r\n"); fpassthru($ssl); } ?>
* 64-bit correction to variables passed to zend_parse_parametersDavid Hill2003-03-071-27/+28
| | | | | @64-bit correction to variables passed to zend_parse_parameters (Dave)
* MFHIlia Alshanetsky2003-01-311-13/+9
|
* MFH: Bump year.Sebastian Bergmann2002-12-312-2/+2
|
* Fixed ZTS build.Ilia Alshanetsky2002-12-121-1/+1
|
* MFH more entropy "fix"Wez Furlong2002-12-121-0/+9
|
* MFHMarcus Boerger2002-12-121-1/+1
|
* MFH #20936 fixWez Furlong2002-12-122-2/+69
|
* MFH: ws, php_error_docref, typeconversion for cygwinMarcus Boerger2002-12-121-202/+200
|
* No longer experimental.Wez Furlong2002-12-101-5/+0
|
* Fix proto and avoid potential segfault on an error.Wez Furlong2002-12-101-3/+3
|
* Fixed windows build. Symbol PHP_EXPORTS is a no-no for dynamicallyEdin Kadribasic2002-11-111-4/+4
| | | | | linked extensions.
* Fixed bug #19935. Made OpenSSL file system operations abide by safe_modeIlia Alshanetsky2002-11-101-6/+70
| | | | | & open_basedir restrictions.
* correct protoWez Furlong2002-08-101-1/+1
|
* syntax highlighting for vimWez Furlong2002-08-091-1/+2
|
* Fixed bug: #18295. e_os.h is not supposed to be included..foobar2002-07-121-3/+4
|
* Fixed bug: #17751 (typo)foobar2002-06-131-1/+1
|
* proto tweakWez Furlong2002-05-171-1/+1
|
* Fix for #16885Wez Furlong2002-05-011-0/+2
|
* Probable fix for #16940.Wez Furlong2002-05-011-3/+6
|
* Remove compiler warningsYasuo Ohgaki2002-04-191-5/+5
|
* fix build with ZE2Wez Furlong2002-04-121-5/+5
|
* Add subject hash to parsed x509 data.Wez Furlong2002-03-282-3/+10
| | | | | Make the test use file_get_contents().
* Fix regular openssl_pkey_get_private($content, $phrase) syntax andWez Furlong2002-03-263-2/+80
| | | | | | add test case. This stuff should be merged into the 4.2 branch.
* - Make it possible to build ext/openssl as shared extensionfoobar2002-03-201-2/+4
|
* extension converted automatically to PHP_NEW_EXTENSION. Manually confirmedSascha Schumann2002-03-122-8/+1
|
* Maintain headers.Sebastian Bergmann2002-02-281-2/+2
|
* - Fix for openssl_pkcs7_sign segfaultsDerick Rethans2002-01-311-1/+1
| | | | | (patch by Christian Stocker <chregu@php.net>)
* Update headers.Sebastian Bergmann2001-12-112-4/+4
|
* proto fixHartmut Holzgraefe2001-12-071-1/+1
|
* proto fixesHartmut Holzgraefe2001-12-061-5/+5
|
* Unified the configure messages.foobar2001-11-301-1/+2
|
* * zend_module_entry change: apino, debug and zts are moved first,Stig Bakken2001-10-111-0/+2
| | | | | | see README.EXTENSIONS file for upgrade help. @Introduced extension version numbers (Stig)
* nuke unnecessary force-by-ref declarations + name the needed in a proper wayDaniel Beulshausen2001-10-051-18/+14
|
* use maxpathlen instead of path_maxDaniel Beulshausen2001-10-041-7/+9
|
* Didn't compile, replaced some TSRMLS_C with TSRMLS_CCStig Venaas2001-09-301-7/+7
|