Chris Wright
480e4f8541
Add peer certificate verification on windows
...
Peer certificate verification on Windows using the native certificate store and the Windows API
2014-02-25 16:51:49 +00:00
Anatol Belski
38d02db86d
Merge branch 'PHP-5.6'
...
* PHP-5.6:
fix linkage
More openssl UPGRADING updates
Fix build against older OpenSSL libs
Update NEWS/UPGRADING with openssl additions
2014-02-21 23:14:48 +01:00
Anatol Belski
5b6ef90bc0
fix linkage
...
"extern inline" looks like tricky case for portability, but extern
is required with VS. So reduce the case to a starndard one to avoid
unporbatibily.
2014-02-21 23:09:16 +01:00
Daniel Lowrey
a27db7d2da
Fix build against older OpenSSL libs
2014-02-21 13:01:04 -07:00
Daniel Lowrey
c3d76441d5
Fix build against older OpenSSL libs
2014-02-21 12:16:23 -07:00
Daniel Lowrey
1268bd6045
Merge branch 'PHP-5.6'
...
* PHP-5.6:
Mitigate client-initiated SSL renegotiation DoS
2014-02-21 09:15:53 -07:00
Daniel Lowrey
5389d0963c
Merge branch 'reneg-limit' of https://github.com/rdlowrey/php-src into PHP-5.6
...
* 'reneg-limit' of https://github.com/rdlowrey/php-src :
Mitigate client-initiated SSL renegotiation DoS
2014-02-21 09:13:55 -07:00
Daniel Lowrey
b6edbd5897
Mitigate client-initiated SSL renegotiation DoS
2014-02-21 06:31:56 -07:00
Anatol Belski
04a10be9db
Merge branch 'PHP-5.6'
...
* PHP-5.6:
C89 compat
2014-02-21 11:24:18 +01:00
Anatol Belski
f51555ca58
C89 compat
2014-02-21 11:23:42 +01:00
Daniel Lowrey
86d9235de5
Merge branch 'PHP-5.6'
...
* PHP-5.6:
Improve OpenSSL compile flag compatibility, minor updates
Use crypto method flags; add tlsv1.0 wrapper; add wrapper tests
Improve server forward secrecy, refactor client SNI
Add 'honor_cipher_order' server context option
Add 'capture_session_meta' context option
Disable TLS compression by default in both clients and servers
Release ssl buffers
Add openssl_get_cert_locations() function
Explicitly set cert verify depth if not specified
Strengthen default cipher list
2014-02-20 17:46:54 -07:00
Daniel Lowrey
9f94e0b51c
Improve OpenSSL compile flag compatibility, minor updates
2014-02-20 17:23:34 -07:00
Daniel Lowrey
3a9829af20
Use crypto method flags; add tlsv1.0 wrapper; add wrapper tests
2014-02-20 17:10:06 -07:00
Daniel Lowrey
d0c9207cff
Improve server forward secrecy, refactor client SNI
2014-02-20 17:10:06 -07:00
Daniel Lowrey
742fc5fb35
Add 'honor_cipher_order' server context option
2014-02-20 17:10:06 -07:00
Daniel Lowrey
081c8e9d92
Add 'capture_session_meta' context option
2014-02-20 17:10:06 -07:00
Daniel Lowrey
b98b093d73
Disable TLS compression by default in both clients and servers
2014-02-20 17:10:06 -07:00
Daniel Lowrey
b9ba011c0f
Release ssl buffers
2014-02-20 17:10:06 -07:00
Daniel Lowrey
df6bfe3be2
Add openssl_get_cert_locations() function
2014-02-20 17:10:06 -07:00
Daniel Lowrey
258d04df5c
Explicitly set cert verify depth if not specified
2014-02-20 17:10:06 -07:00
Daniel Lowrey
225f534b1a
Strengthen default cipher list
2014-02-20 17:10:06 -07:00
Daniel Lowrey
af318419ad
Merge branch 'PHP-5.6'
...
* PHP-5.6:
Add tests for Bug #65538
Fix Bug #65538 (cafile now supports stream wrappers)
2014-02-19 04:19:30 -07:00
Daniel Lowrey
e272225e2a
Merge branch 'bug-65538' of https://github.com/rdlowrey/php-src into PHP-5.6
...
* 'bug-65538' of https://github.com/rdlowrey/php-src :
Add tests for Bug #65538
Fix Bug #65538 (cafile now supports stream wrappers)
2014-02-19 04:17:33 -07:00
Daniel Lowrey
4c1baa8263
Merge branch 'PHP-5.6'
...
* PHP-5.6:
Skip failing tests when EC unavailable (RHEL)
2014-02-19 04:03:16 -07:00
Daniel Lowrey
d9036d14f7
Merge branch 'PHP-5.5' into PHP-5.6
...
* PHP-5.5:
Skip failing tests when EC unavailable (RHEL)
2014-02-19 04:01:57 -07:00
Daniel Lowrey
a7d3606650
Merge branch 'PHP-5.4' into PHP-5.5
...
* PHP-5.4:
Skip failing tests when EC unavailable (RHEL)
Conflicts:
ext/openssl/openssl.c
2014-02-19 04:01:08 -07:00
Daniel Lowrey
633f898f15
Skip failing tests when EC unavailable (RHEL)
2014-02-19 03:57:37 -07:00
Daniel Lowrey
491d492ada
Merge branch 'PHP-5.6'
...
* PHP-5.6:
Fixed broken build when EC unavailable
2014-02-17 19:39:43 -05:00
Daniel Lowrey
4e4d319e62
Merge branch 'PHP-5.5' into PHP-5.6
...
* PHP-5.5:
Fixed broken build when EC unavailable
2014-02-17 19:38:49 -05:00
Daniel Lowrey
bd9aa181dc
Merge branch 'PHP-5.4' into PHP-5.5
...
* PHP-5.4:
Fixed broken build when EC unavailable
2014-02-17 19:38:30 -05:00
Daniel Lowrey
a80cec1190
Fixed broken build when EC unavailable
2014-02-17 18:55:39 -05:00
Daniel Lowrey
2a83295b14
Add tests for Bug #65538
2014-02-16 09:20:43 -07:00
Daniel Lowrey
c7220dc6c5
Fix Bug #65538 (cafile now supports stream wrappers)
2014-02-16 08:47:37 -07:00
Daniel Lowrey
1b4af87af4
Merge branch 'PHP-5.6'
...
* PHP-5.6:
Fix for bug66501 - "key type not supported in this PHP build"
2014-02-14 18:24:04 -07:00
Daniel Lowrey
b60cb2b88a
Merge branch 'PHP-5.5' into PHP-5.6
...
* PHP-5.5:
Fix for bug66501 - "key type not supported in this PHP build"
2014-02-14 18:20:01 -07:00
Daniel Lowrey
65adb74984
Merge branch 'PHP-5.4' into PHP-5.5
...
* PHP-5.4:
Fix for bug66501 - "key type not supported in this PHP build"
2014-02-14 18:15:24 -07:00
mk-j
19524fc6fe
Fix for bug66501 - "key type not supported in this PHP build"
2014-02-14 18:11:46 -07:00
Daniel Lowrey
89292d95ad
Add missing TSRMLS_CC
2014-02-14 17:27:29 -07:00
Daniel Lowrey
8562b8c163
Merge branch 'PHP-5.6'
...
* PHP-5.6:
Bug #47030 (separate host and peer verification)
2014-02-14 15:40:36 -07:00
Daniel Lowrey
ce8dc0ede2
Bug #47030 (separate host and peer verification)
2014-02-14 15:17:30 -07:00
Daniel Lowrey
a5551b73db
Merge branch 'PHP-5.6'
...
* PHP-5.6:
Fix test broken if openssl is compiled without sslv2
2014-02-14 13:39:53 -07:00
Daniel Lowrey
f073588e75
Fix test broken if openssl is compiled without sslv2
2014-02-14 13:39:02 -07:00
Daniel Lowrey
4921c1f0ce
Fix segfault accessing context when no context assigned
...
Conflicts:
ext/openssl/xp_ssl.c
2014-02-14 10:33:43 -07:00
Daniel Lowrey
8582353700
Fix segfault accessing context when no context assigned
2014-02-14 10:24:08 -07:00
Daniel Lowrey
6c1cdd0814
Merge branch 'PHP-5.6'
...
* PHP-5.6:
Fixed SNI failure from missing Z_STRVAL_PP
2014-02-04 19:13:50 -07:00
Daniel Lowrey
99fa59054d
Fixed SNI failure from missing Z_STRVAL_PP
2014-02-04 19:11:56 -07:00
Daniel Lowrey
0893a13e32
Remove #if PHP_VERSION_ID version checks
2014-02-01 08:13:53 -07:00
Daniel Lowrey
05c309f2d8
Remove #if PHP_VERSION_ID version checks
2014-02-01 08:01:13 -07:00
Daniel Lowrey
58293fb533
Use master-agnostic zend_is_true checks
2014-01-31 14:18:31 -07:00
Daniel Lowrey
43432c12f1
Fixed build breakage from b4b4d9697f
2014-01-29 17:57:59 -07:00