Anatol Belski
56cbe04381
fix stdin reading in new openssl tests
2014-02-26 11:27:24 +01:00
Daniel Lowrey
bab017ddfd
Remove test case invalidated by openssl.cafile accessibility change
2014-02-25 13:02:13 -07:00
Daniel Lowrey
bd95716b8e
Merge branch 'windowsPeerVerification' of https://github.com/DaveRandom/php-src into PHP-5.6
...
* 'windowsPeerVerification' of https://github.com/DaveRandom/php-src :
Update openssl tests with new server/client test harness
Add peer certificate verification on windows
2014-02-25 12:43:52 -07:00
Daniel Lowrey
a4c7ab8399
Remove openssl tests that shouldn't have survived last merge
...
These are .phpt files I meant to remove with the last batch as
the same functionality is now covered in other tests and these
are no longer needed.
2014-02-25 09:59:13 -07:00
Chris Wright
d6fb7b8f2e
Update openssl tests with new server/client test harness
2014-02-25 16:51:50 +00:00
Daniel Lowrey
b6edbd5897
Mitigate client-initiated SSL renegotiation DoS
2014-02-21 06:31:56 -07:00
Daniel Lowrey
9f94e0b51c
Improve OpenSSL compile flag compatibility, minor updates
2014-02-20 17:23:34 -07:00
Daniel Lowrey
3a9829af20
Use crypto method flags; add tlsv1.0 wrapper; add wrapper tests
2014-02-20 17:10:06 -07:00
Daniel Lowrey
081c8e9d92
Add 'capture_session_meta' context option
2014-02-20 17:10:06 -07:00
Daniel Lowrey
e272225e2a
Merge branch 'bug-65538' of https://github.com/rdlowrey/php-src into PHP-5.6
...
* 'bug-65538' of https://github.com/rdlowrey/php-src :
Add tests for Bug #65538
Fix Bug #65538 (cafile now supports stream wrappers)
2014-02-19 04:17:33 -07:00
Daniel Lowrey
d9036d14f7
Merge branch 'PHP-5.5' into PHP-5.6
...
* PHP-5.5:
Skip failing tests when EC unavailable (RHEL)
2014-02-19 04:01:57 -07:00
Daniel Lowrey
a7d3606650
Merge branch 'PHP-5.4' into PHP-5.5
...
* PHP-5.4:
Skip failing tests when EC unavailable (RHEL)
Conflicts:
ext/openssl/openssl.c
2014-02-19 04:01:08 -07:00
Daniel Lowrey
633f898f15
Skip failing tests when EC unavailable (RHEL)
2014-02-19 03:57:37 -07:00
Daniel Lowrey
2a83295b14
Add tests for Bug #65538
2014-02-16 09:20:43 -07:00
Daniel Lowrey
b60cb2b88a
Merge branch 'PHP-5.5' into PHP-5.6
...
* PHP-5.5:
Fix for bug66501 - "key type not supported in this PHP build"
2014-02-14 18:20:01 -07:00
Daniel Lowrey
65adb74984
Merge branch 'PHP-5.4' into PHP-5.5
...
* PHP-5.4:
Fix for bug66501 - "key type not supported in this PHP build"
2014-02-14 18:15:24 -07:00
mk-j
19524fc6fe
Fix for bug66501 - "key type not supported in this PHP build"
2014-02-14 18:11:46 -07:00
Daniel Lowrey
ce8dc0ede2
Bug #47030 (separate host and peer verification)
2014-02-14 15:17:30 -07:00
Daniel Lowrey
f073588e75
Fix test broken if openssl is compiled without sslv2
2014-02-14 13:39:02 -07:00
Daniel Lowrey
b4b4d9697f
Verify peers by default in client socket operations
2014-01-28 10:05:56 -07:00
Anatol Belski
e9efc16660
Merge branch 'PHP-5.5' into PHP-5.6
...
* PHP-5.5:
fix dir separator in cve-2013-6420 test
2013-12-11 13:33:37 +01:00
Anatol Belski
b6bcae5c10
Merge branch 'PHP-5.4' into PHP-5.5
...
* PHP-5.4:
fix dir separator in cve-2013-6420 test
2013-12-11 13:33:16 +01:00
Anatol Belski
ff89066b3d
Merge branch 'PHP-5.3' into PHP-5.4
...
* PHP-5.3:
fix dir separator in cve-2013-6420 test
2013-12-11 13:32:49 +01:00
Anatol Belski
6f739318fd
fix dir separator in cve-2013-6420 test
2013-12-11 13:31:29 +01:00
Stanislav Malyshev
293984ac33
Merge branch 'PHP-5.5' into PHP-5.6
...
* PHP-5.5:
5.3.29-dev
Fix CVE-2013-6420 - memory corruption in openssl_x509_parse
2013-12-10 11:36:06 -08:00
Stanislav Malyshev
41cd533298
Merge branch 'PHP-5.4' into PHP-5.5
...
* PHP-5.4:
5.3.29-dev
Fix CVE-2013-6420 - memory corruption in openssl_x509_parse
2013-12-10 11:35:26 -08:00
Stanislav Malyshev
71daf3229b
Merge branch 'PHP-5.3' into PHP-5.4
...
* PHP-5.3:
5.3.29-dev
Fix CVE-2013-6420 - memory corruption in openssl_x509_parse
Conflicts:
configure.in
main/php_version.h
2013-12-10 11:34:35 -08:00
Stanislav Malyshev
c1224573c7
Fix CVE-2013-6420 - memory corruption in openssl_x509_parse
2013-12-10 11:03:49 -08:00
Michael Wallner
b95f9fa0aa
previous revert killed that file
2013-10-17 15:32:18 +02:00
Michael Wallner
3f2fba4c34
Merge branch 'updated_tls_support' of https://github.com/rdlowrey/php-src
...
* 'updated_tls_support' of https://github.com/rdlowrey/php-src :
Added support for TLSv1.1 and TLSv1.2
Conflicts:
ext/openssl/xp_ssl.c
2013-10-17 15:27:15 +02:00
Michael Wallner
dd3a4c303b
Merge branch 'PHP-5.5'
...
* PHP-5.5:
Revert "TLS news"
Revert "Added support for TLSv1.1 and TLSv1.2"
2013-10-17 15:22:07 +02:00
Michael Wallner
8aaecef524
Revert "Added support for TLSv1.1 and TLSv1.2"
...
This reverts commit 2aaa3d538a
.
2013-10-17 15:20:38 +02:00
Michael Wallner
ad0a85b9e2
fix ws
2013-10-17 15:09:28 +02:00
Michael Wallner
5a7ca69e56
Merge branch 'PHP-5.5'
...
* PHP-5.5:
Added support for TLSv1.1 and TLSv1.2
Conflicts:
ext/openssl/xp_ssl.c
2013-10-17 14:53:50 +02:00
Daniel Lowrey
2aaa3d538a
Added support for TLSv1.1 and TLSv1.2
...
Conflicts:
ext/openssl/xp_ssl.c
2013-10-17 14:49:44 +02:00
Daniel Lowrey
a40dd6e963
Changed return types to zend_bool, renamed test
2013-10-09 09:55:36 -04:00
Daniel Lowrey
2ddefbd2b3
Added support for TLSv1.1 and TLSv1.2
2013-10-08 14:09:17 -04:00
Daniel Lowrey
1970b96443
Added SAN matching during peer verification
2013-10-08 12:37:44 -04:00
Michael Wallner
ea0578e223
Merge branch 'ssl-streams-crypto-method' of https://github.com/mj/php-src
...
* 'ssl-streams-crypto-method' of https://github.com/mj/php-src :
Add unit test that covers setting the crypto method.
Streams for ssl:// transports can now be configured to use a specific crypto method (SSLv3, SSLv2 etc.) by calling
2013-10-08 16:10:00 +02:00
Michael Wallner
8300ced2f7
Merge branch 'bug65729' of https://github.com/datibbaw/php-src
...
* 'bug65729' of https://github.com/datibbaw/php-src :
DNS name comparison is now case insensitive.
Use zend_bool as return value for _match()
Added two more test cases for CN matching.
yay, reduced one variable
Fixed bug that would lead to out of bounds memory access
added better wildcard matching for CN
2013-10-08 15:58:28 +02:00
datibbaw
6106896440
DNS name comparison is now case insensitive.
2013-10-08 10:07:54 +08:00
Tjerk Meesters
674dd73f8c
Added two more test cases for CN matching.
2013-10-07 22:10:05 +08:00
Martin Jansen
047877e810
Add unit test that covers setting the crypto method.
2013-10-04 21:55:29 +02:00
datibbaw
edd93f3452
Support string and array for peer fingerprint matching
2013-09-27 14:13:11 +08:00
Tjerk Meesters
1c7cabb2ca
add md5 and sha1 fingerprint tests
2013-09-23 23:29:17 +08:00
Tjerk Meesters
2bfc5a253b
Renamed to be more descriptive of what it does
2013-09-23 00:51:17 +08:00
Tjerk Meesters
521a5c9568
don't leak cert on errors, return null on zpp failure
2013-09-21 18:24:00 +08:00
Tjerk Meesters
8915c3fb4f
added better wildcard matching for CN
2013-09-21 16:45:20 +08:00
Tjerk Meesters
a97aec16c0
Added test case for openssl_x509_digest()
2013-09-20 23:29:04 +08:00
Stanislav Malyshev
12c2a8a5eb
Merge branch 'PHP-5.5'
...
* PHP-5.5:
Fix for php bug #64802 includes test case
2013-08-18 16:55:03 -07:00