Daniel Lowrey
81f356b4ae
Fix Bug #69402 : Reading empty SSL stream hangs until timeout
2015-04-14 09:25:11 -06:00
Dmitry Stogov
5ba72e5f80
Fixed resource leak
2015-04-08 23:37:05 +03:00
Daniel Lowrey
589374d027
Merge branch 'PHP-5.6'
...
* PHP-5.6:
Don't block on crypto data inside stream_select()
2015-03-11 09:45:28 -06:00
Daniel Lowrey
c661121459
Don't block on crypto data inside stream_select()
2015-03-11 09:44:07 -06:00
Daniel Lowrey
4a336f5d0b
Merge branch 'PHP-5.6'
...
* PHP-5.6:
Fix bug# 69215 (Crypto servers should send client CA list)
Conflicts:
ext/openssl/xp_ssl.c
2015-03-10 18:18:19 -06:00
Daniel Lowrey
3f6b12795c
Fix bug# 69215 (Crypto servers should send client CA list)
2015-03-10 18:13:10 -06:00
Daniel Lowrey
c5c4d22c10
Deprecate "session_meta_capture" SSL context option
...
Meta data about encrypted streams is now available as part of the
"crypto" key in the array returned by stream_get_meta_data(). This
update deprecates the use of the "session_meta_capture" ssl
context option in encrypted streams.
2015-03-09 23:15:57 -06:00
Daniel Lowrey
2dec21634c
Revert "Add stream_socket_crypto_info() function"
...
This reverts commit 13acb7ec65
.
With the added capability to negotiate application layer protocols
via the TLS ALPN extension userland needs a method to access the
negotiated protocol on a given stream. The reverted commit added
a new stream_socket_crypto_info() function for this purpose.
This original approach was discarded in favor of using the
already-existing stream_get_meta_data() API which specifically
exists for just such purposes and requires the addition of no new
functions.
2015-03-09 23:15:57 -06:00
Daniel Lowrey
676a5059b2
Add crypto info to stream_get_meta_data() result on encrypted streams
...
A "crypto" key is added to the output of stream_get_meta_data() calls
when invoked using a stream on which crypto is currently active. The
new key's associated array contains the following keys:
- protocol (string e.g. TLSv1.2, TLSv1.1, etc)
- cipher_name (string)
- cipher_bits (int)
- cipher_version (string)
If the TLS ALPN extension was used to successfully negotiate an
application protocol that protocol's identifier is stored in the
following key:
- alpn_protocol
If no ALPN protocol was negotiated the "alpn_protocol" key is not
present in the crypto meta data array. More meta information
concerning the stream's active encryption state may be added in the
future.
2015-03-09 23:15:57 -06:00
Daniel Lowrey
748433e7bc
Merge branch 'PHP-5.6'
...
* PHP-5.6:
Fix crypto stream timeout regressions
Conflicts:
ext/openssl/xp_ssl.c
2015-03-09 16:02:04 -06:00
Daniel Lowrey
69691cc8ca
Merge branch 'PHP-5.5' into PHP-5.6
...
* PHP-5.5:
Fix crypto stream timeout regressions
2015-03-09 15:55:33 -06:00
Daniel Lowrey
bbfd4a5e62
Fix crypto stream timeout regressions
2015-03-09 15:53:26 -06:00
Anatol Belski
be7371f9ff
fix data type
2015-03-06 16:49:08 +01:00
Daniel Lowrey
88cfc6ccb6
Merge branch 'PHP-5.6'
...
* PHP-5.6:
Fix stream_select() issue with OpenSSL buffer
Conflicts:
main/streams/streams.c
2015-03-05 17:53:04 -07:00
Chris Wright
e7df9d710c
Fix stream_select() issue with OpenSSL buffer
...
Ensure data from OpenSSL internal buffer has been
transfered to PHP stream buffer before a select()
emulation operation is performed
Addresses bug #65137
https://bugs.php.net/bug.php?id=65137
Conflicts:
ext/openssl/xp_ssl.c
2015-03-05 17:18:14 -07:00
Daniel Lowrey
ca24d19a89
Really fix zts this time
2015-03-05 14:09:25 -07:00
Daniel Lowrey
927b137c1b
Merge branch 'PHP-5.6'
...
* PHP-5.6:
Fix ZTS
Fix ZTS build
Conflicts:
ext/openssl/openssl.c
ext/openssl/xp_ssl.c
2015-03-05 12:24:04 -07:00
Daniel Lowrey
c985ec737d
Fix ZTS
2015-03-05 12:19:15 -07:00
Daniel Lowrey
73de105481
Merge branch 'PHP-5.6'
...
* PHP-5.6:
Fixed bug #68265 (SAN match fails with trailing DNS dot)
2015-03-04 23:56:36 -07:00
Daniel Lowrey
65a9a5ca12
Fixed bug #68265 (SAN match fails with trailing DNS dot)
2015-03-04 23:55:42 -07:00
Daniel Lowrey
fe29b8134c
Merge branch 'PHP-5.6'
...
* PHP-5.6:
hexadecimal is case*in*sensitive
Conflicts:
ext/openssl/xp_ssl.c
2015-03-04 23:00:59 -07:00
Daniel Lowrey
1de1ff75f5
Merge branch 'PHP-5.6' of https://github.com/bjori/php-src into PHP-5.6
...
* 'PHP-5.6' of https://github.com/bjori/php-src :
hexadecimal is case*in*sensitive
2015-03-04 22:55:22 -07:00
Daniel Lowrey
94a70b98a6
Merge branch 'PHP-5.6'
...
* PHP-5.6:
Fixed bug #68879 (IP Address fields in subjectAltNames not used)
Fix broken test
Conflicts:
ext/openssl/xp_ssl.c
2015-03-04 22:42:25 -07:00
Daniel Lowrey
5dcace058a
Fixed bug #68879 (IP Address fields in subjectAltNames not used)
2015-03-04 22:39:25 -07:00
Hannes Magnusson
3c2c029bfd
hexadecimal is case*in*sensitive
2015-03-04 16:03:45 -08:00
Daniel Lowrey
b5d97140c0
Merge branch 'tls-alpn'
...
* tls-alpn:
Improve test to target specific issue
Misc updates/cleanup
Add TLS ALPN extension support in crypto client/server streams
Add stream_socket_crypto_info() function
Update for compatibility with newer openssl libs
2015-03-04 13:56:58 -07:00
Daniel Lowrey
5de64a29e6
Merge branch 'PHP-5.6'
...
* PHP-5.6:
Fixed bug #68920 (use strict peer_fingerprint input checks)
Conflicts:
ext/openssl/xp_ssl.c
2015-03-04 12:50:35 -07:00
Daniel Lowrey
241f3c34b8
Fixed bug #68920 (use strict peer_fingerprint input checks)
2015-03-04 12:47:46 -07:00
Daniel Lowrey
a39b1898fe
Misc updates/cleanup
2015-03-04 09:24:27 -05:00
Daniel Lowrey
3e841470c9
Add TLS ALPN extension support in crypto client/server streams
2015-02-28 17:41:30 -05:00
Daniel Lowrey
13acb7ec65
Add stream_socket_crypto_info() function
2015-02-28 17:41:29 -05:00
Daniel Lowrey
3ff36c265f
Update for OpenSSL 1.0.2 compatibility
2015-02-28 17:41:29 -05:00
Anatol Belski
c17e007a29
Merge branch 'PHP-5.6'
...
* PHP-5.6:
fix condition
2015-02-13 13:40:37 +01:00
Anatol Belski
b3d28d14d6
Merge branch 'PHP-5.5' into PHP-5.6
...
* PHP-5.5:
fix condition
2015-02-13 13:40:10 +01:00
Anatol Belski
5ff77b005b
fix condition
2015-02-13 13:39:46 +01:00
Daniel Lowrey
712712e8d6
Merge branch 'PHP-5.6'
...
Conflicts:
ext/openssl/xp_ssl.c
2015-02-09 15:14:47 -05:00
Daniel Lowrey
fb2314798e
Merge branch 'PHP-5.5' into PHP-5.6
...
Conflicts:
ext/openssl/xp_ssl.c
2015-02-09 11:44:09 -05:00
Daniel Lowrey
1eef4f2a0c
Miscellaneous cleanup
2015-02-09 11:42:17 -05:00
Brad Broerman
dddbe0fc33
Update xp_ssl.c
...
Added TSRMLS_CC to php_openssl_sockop_io calls.
2015-02-04 10:13:36 -05:00
Xinchen Hui
942809909e
Cleanup resource handling APIs
2015-02-02 13:23:16 +08:00
Michael Wallner
3c4540dec9
fix warnings
2015-01-30 22:49:44 +01:00
Anatol Belski
8d054be62f
fix datatype mismatches, improve error checks
2015-01-30 14:36:33 +01:00
Anatol Belski
085907d168
fix datatype mismatches, improved error checks
2015-01-30 13:52:11 +01:00
Brad Broerman
1482ed2d56
reneg and should_close are not yet members of sslsock. Removing...
2015-01-28 22:36:41 -05:00
Brad Broerman
fd4641696c
Updated with SSL fixes (backported from trunk)
2015-01-28 00:04:20 -05:00
Daniel Lowrey
4965fe7fb8
Merge https://github.com/bbroerman30/php-src into windows-ssl-timeout-fix
...
Conflicts:
ext/openssl/xp_ssl.c
2015-01-27 13:22:47 -05:00
Brad Broerman
8302d658db
Quick fix
2015-01-26 21:35:35 -05:00
Brad Broerman
db49dd91bd
Fixed windows infinite loop problem.
2015-01-26 20:40:52 -05:00
Anatol Belski
ee8a0b3797
cleanup TSRMLS_*
2015-01-23 18:05:18 +01:00
Anatol Belski
647caea9f7
C89 compat
2015-01-23 15:04:29 +01:00