php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login
Bug #77245 certificates expired
Submitted: 2018-12-05 19:35 UTC Modified: 2018-12-05 23:10 UTC
From: olivier dot yiptong at gmail dot com Assigned: cmb (profile)
Status: Closed Package: OpenSSL related
PHP Version: 7.2.12 OS: Linux
Private report: No CVE-ID: None
Welcome back! If you're the original bug submitter, here's where you can edit the bug or add additional notes.
If you forgot your password, you can retrieve your password here.
Password:
Status:
Package:
Bug Type:
Summary:
From: olivier dot yiptong at gmail dot com
New email:
PHP Version: OS:

 

 [2018-12-05 19:35 UTC] olivier dot yiptong at gmail dot com
Description:
------------
Tests are failing because the certificates are expired:

ext/openssl/tests/bug54992.phpt
ext/openssl/tests/bug65538_001.phpt
ext/openssl/tests/bug65538_003.phpt
ext/openssl/tests/bug74159.phpt
ext/openssl/tests/capture_peer_cert_001.phpt
ext/openssl/tests/openssl_peer_fingerprint_basic.phpt
ext/openssl/tests/peer_verification.phpt
ext/openssl/tests/session_meta_capture.phpt
ext/openssl/tests/stream_crypto_flags_001.phpt
ext/openssl/tests/stream_crypto_flags_002.phpt
ext/openssl/tests/stream_crypto_flags_003.phpt
ext/openssl/tests/stream_crypto_flags_004.phpt
ext/openssl/tests/stream_verify_peer_name_002.phpt
ext/openssl/tests/stream_verify_peer_name_003.phpt

The certificates used in the tests should either be auto-generated to be expiry proof, or a certificate that expires far in the future needs to be generated.

Expected result:
----------------
the tests pass

Actual result:
--------------
the tests fail

Patches

Pull Requests

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2018-12-05 19:37 UTC] spam2 at rhsoft dot net
that is known upstream and AFAIK already fixed and 7.2.13 is rwady to be anncound

[root@buildserver:~]$ php -v
PHP 7.2.13
 [2018-12-05 23:10 UTC] cmb@php.net
-Status: Open +Status: Closed -Assigned To: +Assigned To: cmb
 [2018-12-05 23:10 UTC] cmb@php.net
> that is known upstream and AFAIK already fixed and 7.2.13 is
> rwady to be anncound

While that's not an upstream issue (e.g. regarding libopenssl), it
is known to the PHP devs, and a preliminary fix[1] will be shiped
with the next releases (scheduled for tommorow).  A permanent fix
is in the works[2].

[1] <https://github.com/php/php-src/pull/3693>
[2] <https://github.com/php/php-src/pull/3698>
 [2018-12-05 23:15 UTC] spam2 at rhsoft dot net
upstream from the view of a bug reporter is php and it is not a bug at all, it's what it is: certificates expired and no cert watch or regularly automated replacement
 
PHP Copyright © 2001-2025 The PHP Group
All rights reserved.
Last updated: Thu May 15 03:01:28 2025 UTC