Please try with PHP 4.0.6 or PHP 4.0.7RC3.
If you are still getting a false return, try using
the openssl_error_string() as mentioned in the online
manual.

--Wez.

Upgraded to 4.0.6, so now I can use the openssl_error_string() function. However, I still don't see any errors generated
by openssl_seal(). Below is how I use it:

if (openssl_seal($data, $sealed, $ekeys, array($pk1,$pk2)))     {
        echo "Sealed: $sealed\n";
}
else    {
        echo "Could not seal data\n";
        while ($text = openssl_error_string())
                echo "$text \n";
}

This reports no errors. When I try to open the 'encrypted'
data, I do get some errors (I think these are expected):

error:0407106B:rsa routines:RSA_padding_check_PKCS1_type_2:block type is not 02 
error:04065072:rsa routines:RSA_EAY_PRIVATE_DECRYPT:padding check failed 

Below is the *whole* script. The only output I get is
"There were errors". It can't seal the data, returning
FALSE, but no error messages are generated.

<?php
$cert_path1 = "/usr/installs/openssl-0.9.6a/demos/maurice/cert.pem";
$cert_path2 = "/usr/installs/openssl-0.9.6a/demos/sign/cert.pem";
$data = "This is the data to be sealed";

$fp = fopen($cert_path1, "r");
$cert = fread($fp, 8192);
fclose($fp);
$pk1 = openssl_get_publickey($cert);
$fp = fopen($cert_path2, "r");
$cert = fread($fp, 8192);
fclose($fp);
$pk2 = openssl_get_publickey($cert);

if (openssl_seal($data, $sealed, $ekeys, array($pk1,$pk2)))
        echo "Sealed data: $sealed<br />";
else    {
        echo "There were errors<br />";
        while ($text = openssl_error_string())
                echo "$text <br />";
}
openssl_free_key($pk1);
openssl_free_key($pk2);
?>

The same script works just fine for me with PHP 4.0.7RC3.
Could you try it out too?

http://www.php.net/~zeev/php-4.0.7RC3.tar.gz

--Wez.

I *probably* could, but I really wouldn't want to put
RC on that machine. Also I don't think PHP version
is the problem - the function should work on 
PHP 4 >= 4.0.4... it must be something in the 
configuration.

Are there any scripts I could use to test if the 
openssl extension is set up properly? 

Have you resolved this problem yet?

No. But we are planning the long-awaited PHP upgrade on
that server and I might have some news soon.

Setting to feedback until then.

I just thought of something you might try: just build
but not install PHP 4.1.2 as a cgi and retry your script;
you can run the php binary from the source folder and not
risk upsetting the server.

No feedback was provided for this bug for over a month, so it is
being suspended automatically. If you are able to provide the
information that was originally requested, please do so and change
the status of the bug back to "Open".

I have exactly the same problem, with php4.3.10 / openssl OpenSSL 0.9.7e / on BSD/OS 4.2 i386

openssl_error_string return nothing, but openssl_seal returns false.

This is the script:

<?php
	
function seal($info,$key){

  if($pk = openssl_get_publickey($key)){
    echo openssl_error_string();echo '<br>';

    $res=openssl_seal($info, $sealed, $ekeys, array($pk));
    echo openssl_error_string();echo '<br>';
    var_dump($res);echo '<br>';


    openssl_free_key($pk);	
			
    return array('sealed'=>$sealed,'ekey'=>$ekeys[0]);
  }
  echo openssl_error_string();echo '<br>';
  return FALSE;
}

$key="-----BEGIN CERTIFICATE-----
MIIBdDCCAR4CAQAwDQYJKoZIhvcNAQEEBQAwRTELMAkGA1UEBhMCQVUxEzARBgNV
BAgTClNvbWUtU3RhdGUxITAfBgNVBAoTGEludGVybmV0IFdpZGdpdHMgUHR5IEx0
ZDAeFw0wNTAxMTgxOTUyMjBaFw0wNTA3MTcxOTUyMjBaMEUxCzAJBgNVBAYTAkFV
MRMwEQYDVQQIEwpTb21lLVN0YXRlMSEwHwYDVQQKExhJbnRlcm5ldCBXaWRnaXRz
IFB0eSBMdGQwXDANBgkqhkiG9w0BAQEFAANLADBIAkEAx7Z4soVmUJvKfhtBzKAP
oRs9bdllaaTvy9I1kdf0AVFCKN7+US2LQBpGyCpTuENM+WQxJ6vGtJ2pYhGmbPm5
0QIDAQABMA0GCSqGSIb3DQEBBAUAA0EAlvwJFlCbuagfpc6XM7zY8JP0Gz+CXlbh
NUjPgT8xkXzOBtjNxe+yNmhAfGyMXc7uKR+3tS6uHXzPvMg3PKCvqw==
-----END CERTIFICATE-----
";

print_r(seal("Secret data",$key));echo '<br>';
?>

Returns this:

bool(false)
Array ( [sealed] => [ekey] => ) 

The same script runs ok on another computer (php4.3.9/macosx)

openssl_seal crashes my http server! with the windows error if I want to send the error to microsoft:

Apache HTTP Server has encountered a problem and needs to close.  We are sorry for the inconvenience.

The rest of openssl functions do work on my machine which is an XP using php 5.1.2 and OpenSSL 0.9.8a.