php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login
Bug #77245 certificates expired
Submitted: 2018-12-05 19:35 UTC Modified: 2018-12-05 23:10 UTC
From: olivier dot yiptong at gmail dot com Assigned: cmb (profile)
Status: Closed Package: OpenSSL related
PHP Version: 7.2.12 OS: Linux
Private report: No CVE-ID: None
 [2018-12-05 19:35 UTC] olivier dot yiptong at gmail dot com
Description:
------------
Tests are failing because the certificates are expired:

ext/openssl/tests/bug54992.phpt
ext/openssl/tests/bug65538_001.phpt
ext/openssl/tests/bug65538_003.phpt
ext/openssl/tests/bug74159.phpt
ext/openssl/tests/capture_peer_cert_001.phpt
ext/openssl/tests/openssl_peer_fingerprint_basic.phpt
ext/openssl/tests/peer_verification.phpt
ext/openssl/tests/session_meta_capture.phpt
ext/openssl/tests/stream_crypto_flags_001.phpt
ext/openssl/tests/stream_crypto_flags_002.phpt
ext/openssl/tests/stream_crypto_flags_003.phpt
ext/openssl/tests/stream_crypto_flags_004.phpt
ext/openssl/tests/stream_verify_peer_name_002.phpt
ext/openssl/tests/stream_verify_peer_name_003.phpt

The certificates used in the tests should either be auto-generated to be expiry proof, or a certificate that expires far in the future needs to be generated.

Expected result:
----------------
the tests pass

Actual result:
--------------
the tests fail

Patches

Add a Patch

Pull Requests

Add a Pull Request

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2018-12-05 19:37 UTC] spam2 at rhsoft dot net
that is known upstream and AFAIK already fixed and 7.2.13 is rwady to be anncound

[root@buildserver:~]$ php -v
PHP 7.2.13
 [2018-12-05 23:10 UTC] cmb@php.net
-Status: Open +Status: Closed -Assigned To: +Assigned To: cmb
 [2018-12-05 23:10 UTC] cmb@php.net
> that is known upstream and AFAIK already fixed and 7.2.13 is
> rwady to be anncound

While that's not an upstream issue (e.g. regarding libopenssl), it
is known to the PHP devs, and a preliminary fix[1] will be shiped
with the next releases (scheduled for tommorow).  A permanent fix
is in the works[2].

[1] <https://github.com/php/php-src/pull/3693>
[2] <https://github.com/php/php-src/pull/3698>
 [2018-12-05 23:15 UTC] spam2 at rhsoft dot net
upstream from the view of a bug reporter is php and it is not a bug at all, it's what it is: certificates expired and no cert watch or regularly automated replacement
 
PHP Copyright © 2001-2024 The PHP Group
All rights reserved.
Last updated: Thu Mar 28 09:01:26 2024 UTC