php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login
Bug #50293 openssl_****_export_to_file
Submitted: 2009-11-25 15:05 UTC Modified: 2010-08-12 03:31 UTC
Votes:11
Avg. Score:4.1 ± 0.9
Reproduced:5 of 5 (100.0%)
Same Version:5 (100.0%)
Same OS:3 (60.0%)
From: gufophp at gmail dot com Assigned: pajoye
Status: Assigned Package: OpenSSL related
PHP Version: 5.2.11 OS: win32 only - apache
Private report: No CVE-ID:
Have you experienced this issue?
Rate the importance of this bug to you:

 [2009-11-25 15:05 UTC] gufophp at gmail dot com
Description:
------------
incorrect path save export file

Reproduce code:
---------------
<pre>
kpe1.php
<?
set_time_limit(0);
$ssl_configargs = array("digest_alg" => "OPENSSL_ALGO_SHA1",
"private_key_bits" => 384,"encrypt_key" => false,"basicConstraints" => "CA:true","keyUsage" => "cRLSign, keyCertSign",
"nsCertType" => "sslCA, emailCA");
$dn = array("countryName" => 'IT',"stateOrProvinceName" => 'Italy',
"localityName" => 'city',"organizationName" => 'org',
"organizationalUnitName" => 'unit',"commonName" => 'name' ,"emailAddress" => 'mail' );
$numberofdays = '365';
$pkey = openssl_pkey_new( $ssl_configargs );
$csr = openssl_csr_new( $dn, $privkey, $ssl_configargs );
$sscert = openssl_csr_sign( $csr, null, $privkey, $numberofdays );
openssl_csr_export( $csr, $csrout );
openssl_x509_export( $sscert, $certout );
openssl_x509_export_to_file ($sscert ,'crt_509_sk.crt',false);
openssl_pkey_export( $privkey, $pkeyout, $configargs['licence_pwd' ]);
openssl_pkey_export_to_file($privkey,'crt_509_pk.pem');

Expected result:
----------------
[dir]
kpe1.php
crt_509_sk.crt
crt_509_pk.pem

Actual result:
--------------
C:\Programmi\Apache Software Foundation\Apache2.2
.....
crt_509_sk.crt
crt_509_pk.pem
.....


Patches

bug-50293 (last revision 2010-08-12 01:31 UTC) by kalle@php.net)

Add a Patch

Pull Requests

Add a Pull Request

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2009-11-25 18:28 UTC] pajoye@php.net
I think the case is clear, it looks like we do not use VCWD or php stream's api and it fails to get the actual CWD.

I will take a look at it asap.
 [2010-08-12 03:31 UTC] kalle@php.net
The following patch has been added/updated:

Patch Name: bug-50293
Revision:   1281576663
URL:        http://bugs.php.net/patch-display.php?bug=50293&patch=bug-50293&revision=1281576663
 [2010-08-12 03:31 UTC] kalle@php.net
I added a roughly untested patch for this, as I have some issues getting openssl to work in my build env, so the patch is more a theory of how it could be fixed.
 
PHP Copyright © 2001-2017 The PHP Group
All rights reserved.
Last updated: Tue Aug 29 15:01:52 2017 UTC