Anatol Belski
38f349da1f
Merge branch 'PHP-5.6'
...
* PHP-5.6:
remove echo
2014-02-26 12:41:57 +01:00
Anatol Belski
bcff8d1b26
remove echo
2014-02-26 12:41:36 +01:00
Anatol Belski
83b2593b23
Merge branch 'PHP-5.6'
...
* PHP-5.6:
fix stdin reading in new openssl tests
2014-02-26 11:27:48 +01:00
Anatol Belski
56cbe04381
fix stdin reading in new openssl tests
2014-02-26 11:27:24 +01:00
Anatol Belski
8ece03a679
Merge branch 'PHP-5.6'
...
* PHP-5.6:
kick redundant include
2014-02-26 11:24:22 +01:00
Anatol Belski
82a98f6e52
kick redundant include
...
this is already present from php.h
2014-02-26 11:23:43 +01:00
Daniel Lowrey
b3b709f1fc
Merge branch 'PHP-5.6'
...
* PHP-5.6:
Prevent implicit function declaration when TLSEXT unavailable
2014-02-25 19:12:49 -07:00
Daniel Lowrey
2bc0dbab44
Prevent implicit function declaration when TLSEXT unavailable
2014-02-25 19:12:33 -07:00
Daniel Lowrey
33914b5166
Merge branch 'PHP-5.6'
...
* PHP-5.6:
Remove test case invalidated by openssl.cafile accessibility change
Tolerate non-standard newlines when parsing stream CA files
Remove openssl tests that shouldn't have survived last merge
Add openssl.cafile ini check when loading cainfo
Change openssl directives to PHP_INI_PERDIR
Update openssl tests with new server/client test harness
Add peer certificate verification on windows
2014-02-25 13:27:10 -07:00
Daniel Lowrey
bab017ddfd
Remove test case invalidated by openssl.cafile accessibility change
2014-02-25 13:02:13 -07:00
Daniel Lowrey
bd95716b8e
Merge branch 'windowsPeerVerification' of https://github.com/DaveRandom/php-src into PHP-5.6
...
* 'windowsPeerVerification' of https://github.com/DaveRandom/php-src :
Update openssl tests with new server/client test harness
Add peer certificate verification on windows
2014-02-25 12:43:52 -07:00
Daniel Lowrey
f8fe09dcef
Tolerate non-standard newlines when parsing stream CA files
2014-02-25 09:59:13 -07:00
Daniel Lowrey
a4c7ab8399
Remove openssl tests that shouldn't have survived last merge
...
These are .phpt files I meant to remove with the last batch as
the same functionality is now covered in other tests and these
are no longer needed.
2014-02-25 09:59:13 -07:00
Daniel Lowrey
47b5873c5d
Change openssl directives to PHP_INI_PERDIR
...
Because openssl.cafile and openssl.capath have implications for
security these directives have been changed to PHP_INI_PERDIR
(previously PHP_INI_ALL)
2014-02-25 09:59:13 -07:00
Chris Wright
d6fb7b8f2e
Update openssl tests with new server/client test harness
2014-02-25 16:51:50 +00:00
Chris Wright
480e4f8541
Add peer certificate verification on windows
...
Peer certificate verification on Windows using the native certificate store and the Windows API
2014-02-25 16:51:49 +00:00
Anatol Belski
38d02db86d
Merge branch 'PHP-5.6'
...
* PHP-5.6:
fix linkage
More openssl UPGRADING updates
Fix build against older OpenSSL libs
Update NEWS/UPGRADING with openssl additions
2014-02-21 23:14:48 +01:00
Anatol Belski
5b6ef90bc0
fix linkage
...
"extern inline" looks like tricky case for portability, but extern
is required with VS. So reduce the case to a starndard one to avoid
unporbatibily.
2014-02-21 23:09:16 +01:00
Daniel Lowrey
a27db7d2da
Fix build against older OpenSSL libs
2014-02-21 13:01:04 -07:00
Daniel Lowrey
c3d76441d5
Fix build against older OpenSSL libs
2014-02-21 12:16:23 -07:00
Daniel Lowrey
1268bd6045
Merge branch 'PHP-5.6'
...
* PHP-5.6:
Mitigate client-initiated SSL renegotiation DoS
2014-02-21 09:15:53 -07:00
Daniel Lowrey
5389d0963c
Merge branch 'reneg-limit' of https://github.com/rdlowrey/php-src into PHP-5.6
...
* 'reneg-limit' of https://github.com/rdlowrey/php-src :
Mitigate client-initiated SSL renegotiation DoS
2014-02-21 09:13:55 -07:00
Daniel Lowrey
b6edbd5897
Mitigate client-initiated SSL renegotiation DoS
2014-02-21 06:31:56 -07:00
Anatol Belski
04a10be9db
Merge branch 'PHP-5.6'
...
* PHP-5.6:
C89 compat
2014-02-21 11:24:18 +01:00
Anatol Belski
f51555ca58
C89 compat
2014-02-21 11:23:42 +01:00
Daniel Lowrey
86d9235de5
Merge branch 'PHP-5.6'
...
* PHP-5.6:
Improve OpenSSL compile flag compatibility, minor updates
Use crypto method flags; add tlsv1.0 wrapper; add wrapper tests
Improve server forward secrecy, refactor client SNI
Add 'honor_cipher_order' server context option
Add 'capture_session_meta' context option
Disable TLS compression by default in both clients and servers
Release ssl buffers
Add openssl_get_cert_locations() function
Explicitly set cert verify depth if not specified
Strengthen default cipher list
2014-02-20 17:46:54 -07:00
Daniel Lowrey
9f94e0b51c
Improve OpenSSL compile flag compatibility, minor updates
2014-02-20 17:23:34 -07:00
Daniel Lowrey
3a9829af20
Use crypto method flags; add tlsv1.0 wrapper; add wrapper tests
2014-02-20 17:10:06 -07:00
Daniel Lowrey
d0c9207cff
Improve server forward secrecy, refactor client SNI
2014-02-20 17:10:06 -07:00
Daniel Lowrey
742fc5fb35
Add 'honor_cipher_order' server context option
2014-02-20 17:10:06 -07:00
Daniel Lowrey
081c8e9d92
Add 'capture_session_meta' context option
2014-02-20 17:10:06 -07:00
Daniel Lowrey
b98b093d73
Disable TLS compression by default in both clients and servers
2014-02-20 17:10:06 -07:00
Daniel Lowrey
b9ba011c0f
Release ssl buffers
2014-02-20 17:10:06 -07:00
Daniel Lowrey
df6bfe3be2
Add openssl_get_cert_locations() function
2014-02-20 17:10:06 -07:00
Daniel Lowrey
258d04df5c
Explicitly set cert verify depth if not specified
2014-02-20 17:10:06 -07:00
Daniel Lowrey
225f534b1a
Strengthen default cipher list
2014-02-20 17:10:06 -07:00
Daniel Lowrey
af318419ad
Merge branch 'PHP-5.6'
...
* PHP-5.6:
Add tests for Bug #65538
Fix Bug #65538 (cafile now supports stream wrappers)
2014-02-19 04:19:30 -07:00
Daniel Lowrey
e272225e2a
Merge branch 'bug-65538' of https://github.com/rdlowrey/php-src into PHP-5.6
...
* 'bug-65538' of https://github.com/rdlowrey/php-src :
Add tests for Bug #65538
Fix Bug #65538 (cafile now supports stream wrappers)
2014-02-19 04:17:33 -07:00
Daniel Lowrey
4c1baa8263
Merge branch 'PHP-5.6'
...
* PHP-5.6:
Skip failing tests when EC unavailable (RHEL)
2014-02-19 04:03:16 -07:00
Daniel Lowrey
d9036d14f7
Merge branch 'PHP-5.5' into PHP-5.6
...
* PHP-5.5:
Skip failing tests when EC unavailable (RHEL)
2014-02-19 04:01:57 -07:00
Daniel Lowrey
a7d3606650
Merge branch 'PHP-5.4' into PHP-5.5
...
* PHP-5.4:
Skip failing tests when EC unavailable (RHEL)
Conflicts:
ext/openssl/openssl.c
2014-02-19 04:01:08 -07:00
Daniel Lowrey
633f898f15
Skip failing tests when EC unavailable (RHEL)
2014-02-19 03:57:37 -07:00
Daniel Lowrey
491d492ada
Merge branch 'PHP-5.6'
...
* PHP-5.6:
Fixed broken build when EC unavailable
2014-02-17 19:39:43 -05:00
Daniel Lowrey
4e4d319e62
Merge branch 'PHP-5.5' into PHP-5.6
...
* PHP-5.5:
Fixed broken build when EC unavailable
2014-02-17 19:38:49 -05:00
Daniel Lowrey
bd9aa181dc
Merge branch 'PHP-5.4' into PHP-5.5
...
* PHP-5.4:
Fixed broken build when EC unavailable
2014-02-17 19:38:30 -05:00
Daniel Lowrey
a80cec1190
Fixed broken build when EC unavailable
2014-02-17 18:55:39 -05:00
Daniel Lowrey
2a83295b14
Add tests for Bug #65538
2014-02-16 09:20:43 -07:00
Daniel Lowrey
c7220dc6c5
Fix Bug #65538 (cafile now supports stream wrappers)
2014-02-16 08:47:37 -07:00
Daniel Lowrey
1b4af87af4
Merge branch 'PHP-5.6'
...
* PHP-5.6:
Fix for bug66501 - "key type not supported in this PHP build"
2014-02-14 18:24:04 -07:00
Daniel Lowrey
b60cb2b88a
Merge branch 'PHP-5.5' into PHP-5.6
...
* PHP-5.5:
Fix for bug66501 - "key type not supported in this PHP build"
2014-02-14 18:20:01 -07:00