php-src/ext/openssl
Nikita Popov 6c6a58e930 Allow passing $tag for non-authenticated encryption
openssl_encrypt() currently throws a warning if the $tag out
parameter is passed for a non-authenticated cipher. This violates
the principle that a function should behave the same if a parameter
is not passed, and if the default value is passed for the parameter.

I believe this warning should simply be dropped and the $tag be
populated with null, as is already the case. Otherwise, it is not
possible to use openssl_encrypt() in generic wrapper APIs, that are
compatible with both authenticated and non-authenticated encryption.

Closes GH-6333.
2020-10-14 10:54:06 +02:00
..
tests Allow passing $tag for non-authenticated encryption 2020-10-14 10:54:06 +02:00
config.w32 Remove HAVE_DSA_DEFAULT_METHOD 2019-07-22 16:02:55 +02:00
config0.m4 Normalize comments in *nix build system m4 files 2019-05-12 18:43:03 +02:00
CREDITS
openssl.c Allow passing $tag for non-authenticated encryption 2020-10-14 10:54:06 +02:00
php_openssl.h Remove local variables 2019-02-03 21:03:00 +01:00
xp_ssl.c Don't generate spurious warning is security_level not supported 2020-06-18 14:21:53 +02:00