php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login

go to bug id or search bugs for

Bug #14931 Apache hangs when using imap with SSL
Submitted: 2002-01-08 12:54 UTC Modified: 2002-04-24 11:31 UTC
Votes:2
Avg. Score:5.0 ± 0.0
Reproduced:1 of 1 (100.0%)
Same Version:0 (0.0%)
Same OS:0 (0.0%)
From: janek at tartu dot cv dot ee Assigned:
Status: Closed Package: IMAP related
PHP Version: 4.1.1 OS: Linux
Private report: No CVE-ID: None
View Developer Edit
Welcome back! If you're the original bug submitter, here's where you can edit the bug or add additional notes.
If you forgot your password, you can retrieve your password here.
Password:
Status:
Package:
Bug Type:
Summary:
From: janek at tartu dot cv dot ee
New email:
PHP Version: OS:

 

 [2002-01-08 12:54 UTC] janek at tartu dot cv dot ee 
'./configure' '--with-apache=../apache_1.3.22' '--with-mysql=/usr' '--enable-track-vars' '--disable-debug' '--with-openssl=/usr' '--with-zlib' '--enable-calendar' '--with-curl' '--with-dom' '--with-gd' '--with-imap' '--with-imap-ssl' '--with-kerberos' '--enable-xslt' '--with-xslt-sablot' '--with-expat-dir=/usr'

RedHat 7.2
imap-2000c-15
openssl-0.9.6b-8

imap_open("{mail.server:993/imap/ssl/novalidate-cert}", "username", "passwd");
hangs the Apache instance. I can track that it connects to the right port but username is not sent. When trying to connect without ssl everything works. So is this PHP problem or ?

Patches

Pull Requests

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2002-01-09 21:42 UTC] dwchin at umich dot edu 
I've experienced exactly the same thing when compiling PHP 4.1.1 as an Apache dynamic module:

./configure  --prefix=/var/www --enable-xml --with-mcrypt=/var/www --with-gettext --with-imap=/usr/local/src/pine4.40/imap --with-imap-ssl --with-apxs --with-kerberos=/usr/kerberos

I don't think Apache "hangs": it seems like the authentication protocol times out.

This happens both with: "imap/ssl" and "imap/ssl/novalidate-cert".  Have not tried POP3/SSL.

I am certain the problem is not with the c-client code (from the Pine 4.40 distribution) because the pine executable that was compiled with the same c-client negotiates IMAP/ssl/novalidate-cert just fine.
 [2002-01-09 21:49 UTC] dwchin at umich dot edu 
Oh, yes:  The IMAP server is Courier-IMAP.  Apache apache-1.3.22-1.7.1 on RedHat 7.1.

The maillog has no entries from the imapd-ssl server.

The bug was discovered when testing a Horde (2.0)/IMP (3.0) installation.
 [2002-01-10 22:54 UTC] dwchin at umich dot edu 
Some more verbose log output (from using Horde):

Jan 10 22:48:23 HORDE [debug] [imp] $imp['stream'] = ; $connstr = {tenaya.physics.lsa.umich.edu:993/imap/ssl/novalidate-cert}; $imp['pass'] = xxxxxx [on line 329 of 
"/var/www/html/horde/imp/lib/IMP.php"]

Jan 10 22:48:23 HORDE [error] [imp] FAILED LOGIN 198.129.208.14 to tenaya.physics.lsa.umich.edu:993[imap/ssl/novalidate-cert] as gurney [on line 347 of "/var/www/html/horde/imp/lib/IMP.php"]

The code fragment that produces the appropriate variables above is:

$imp['stream'] = @imap_open($connstr, $imp['user'], Secret::read(Secret::getKey('imp'), $imp['pass']));
 [2002-01-10 22:55 UTC] dwchin at umich dot edu 
So it looks like imap_open() doesn't return a "stream".
 [2002-01-10 23:00 UTC] dwchin at umich dot edu 
Removing the "@" from imap_open() gives this warning message:

Warning: Couldn't open stream {tenaya.physics.lsa.umich.edu:993/imap/ssl/novalidate-cert} in /var/www/html/horde/imp/lib/IMP.php on
line 322
 [2002-04-24 06:59 UTC] juszkiew at kt dot agh dot edu dot pl 
I think, I found the solution. I tested it on php 4.1.2.

File ext/imap/php_imap.c has got call to function
ssl_onceonlyinit (); 

It should be _after_ calls to 

mail_link(&imapdriver);         /* link in the imap driver */
        mail_link(&nntpdriver);         /* link in the nntp driver */
        mail_link(&pop3driver);         /* link in the pop3 driver */
        mail_link(&mbxdriver);          /* link in the mbx driver */
        mail_link(&tenexdriver);        /* link in the tenex driver */
        mail_link(&mtxdriver);          /* link in the mtx driver */
        mail_link(&dummydriver);        /* link in the dummy driver */

I think that call 
  auth_link (&auth_ssl);

also can help.
 [2002-04-24 11:31 UTC] sniper@php.net 
Fixed in CVS. Fix will also be in PHP 4.2.1.

(I didn't notice any difference though, but that's what
the order is also in linkage.c created during the c-client
compile)
 
PHP Copyright © 2001-2025 The PHP Group
All rights reserved. 		Last updated: Tue May 06 15:01:30 2025 UTC