php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login
Bug #40210 SOAP client crash when parse WSDL file located on a SSL/TLS apache server
Submitted: 2007-01-23 13:57 UTC Modified: 2007-01-25 09:17 UTC
From: maboiteaspam at gmail dot com Assigned:
Status: Closed Package: SOAP related
PHP Version: 5.2.0 OS: Solaris 8
Private report: No CVE-ID: None
Welcome back! If you're the original bug submitter, here's where you can edit the bug or add additional notes.
If you forgot your password, you can retrieve your password here.
Password:
Status:
Package:
Bug Type:
Summary:
From: maboiteaspam at gmail dot com
New email:
PHP Version: OS:

 

 [2007-01-23 13:57 UTC] maboiteaspam at gmail dot com
Description:
------------
The built-in SOAP client for PHP 5.2 crashs (SegFault) when trying to parse a WSDL file located on a secure Apache server configuring to support client authentication via X.509v3 certificates.
The same WSDL works fine on an identical build on a Linux and Solaris server with HTTP and HTTPS connections without strong client authentification.

But when the web server is configuring to be limited only to the web browsers that present a valid certificate, PHP SOAP SSL connection crashs.

Reproduce code:
---------------
Here is a working example:
---
$soapClient = new SoapClient( 
 	"https://monserveur/generate_wsdl.php",
	array( 'local_cert'=> "asg-newCert.crt" ) );

The same example but we enable client authentication in the Apache's web server:
---
$soapClient = new SoapClient( 
 	"https://monserveur/wservices/generate_wsdl.php",
	array( 'local_cert'=> "asg-newCert.crt" ) );

To enable the use of client certificates, we need to add the following directives to httpd.conf:

<Location /www/wservices>
SSLVerifyClient require
SSLVerifyDepth  5
SSLCACertificateFile /opt/apache/conf/ssl/ca.pem
SSLOptions           +FakeBasicAuth
SSLRequireSSL
</Location>



Patches

Pull Requests

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2007-01-23 14:13 UTC] tony2001@php.net
Please try using this CVS snapshot:

  http://snaps.php.net/php5.2-latest.tar.gz
 
For Windows:
 
  http://snaps.php.net/win32/php5.2-win32-latest.zip


 [2007-01-25 09:17 UTC] maboiteaspam at gmail dot com
The last version solved this problem thanks a lot !
 
PHP Copyright © 2001-2024 The PHP Group
All rights reserved.
Last updated: Fri Dec 27 09:01:29 2024 UTC