7 Commits

Author	SHA1	Message	Date
Jakub Zelenka	505e8d2a04	Fix GH-9310: SSL local_cert and local_pk do not respect open_basedir restriction	2022-08-28 12:11:14 +01:00
Jakub Zelenka	c90c9c7545	Make CertificateGenerator not dependent on external config in OpenSSL 3.0	2021-08-08 20:54:46 +01:00
Máté Kocsis	9f44eca6b6	Convert resources to objects in ext/openssl ... Closes GH-5860 Co-authored-by: Nikita Popov <nikita.ppv@gmail.com>	2020-08-01 22:47:20 +02:00
Nikita Popov	21a2da2349	Generate temporary config file when generating certificates ... The putenv trick doesn't work on ZTS Windows, so generate a new openssl config every time.	2020-06-19 09:43:56 +02:00
Nikita Popov	c7fe71c8b7	Add SubjectAltName support to certificate generator ... And switch tests using SAN certificates to the generator. This is ugly, but there doesn't seem to be a more direct way to privide SAN in PHP.	2020-06-18 15:49:08 +02:00
Nikita Popov	52c2f1126d	Use sha256 as digest algorithm in certificate generator ... This makes the generated certificates compatible with security level 2, which is apparently the default on Ubuntu 20.04. Unfortunately this does not fix all tests, because some are using pre-generated certificates.	2020-06-17 22:15:00 +02:00
Alexander Kurilo	1fab01be5b	Generate certs for openssl tests on the fly ... The idea is to create an easy way to provide a certificate that never expires. In order to make it cross-platform, PHP is used rather than openssl CLI app. Using openssl to generate certificates for tests that test openssl might be not the best idea but pros seem to outweight cons that this "recursice dependency" adds	2019-01-10 20:09:42 +00:00