Skip to content

[PHP-8.4] Backports for OpenSSL 4.1 - #25140

Open
thesamesam wants to merge 2 commits into
php:PHP-8.4from
thesamesam:PHP-8.4-openssl-4
Open

thesamesam wants to merge 2 commits into
php:PHP-8.4from
thesamesam:PHP-8.4-openssl-4

Conversation

@thesamesam

@thesamesam thesamesam commented Nov 1, 2026 •

Copy link
Copy Markdown

This passes the testsuite but I haven't done any further testing for it. Please give the php_openssl_matches_common_name changes in the first commit a careful look. The rest applied pretty cleanly from PHP-8.6.


See also #25139.

@thesamesam
thesamesam requested a review from bukka as a code owner November 1, 2026 23:04
@thesamesam thesamesam changed the title [PHP-8.5] Backports for OpenSSL 4.1 [PHP-8.4] Backports for OpenSSL 4.1 Nov 1, 2026
@thesamesam
thesamesam force-pushed the PHP-8.4-openssl-4 branch 4 times, most recently from 7e4d437 to c1b606d Compare November 1, 2026 23:26
@LamentXU123

Copy link
Copy Markdown
Member

CI failure is related.

@thesamesam
thesamesam marked this pull request as draft November 2, 2026 06:31
@thesamesam
thesamesam force-pushed the PHP-8.4-openssl-4 branch 2 times, most recently from 444c1df to 03612e2 Compare November 3, 2026 03:03
@thesamesam
thesamesam marked this pull request as ready for review November 3, 2026 03:13
shivammathur and others added 2 commits November 3, 2026 03:56
* Fix OpenSSL 4 test compatibility

* Fix OpenSSL 4 build compatibility

* Use OpenSSL 4 in macOS CI

* Fix OpenSSL 1.1 build compatibility

* Preserve raw CN matching with OpenSSL 4

(cherry picked from commit 6aca6e3)
OpenSSL 4.1 deprecates ASN1_STRING_set() and ASN1_STRING_length().
use ASN1_STRING_set1_data() and ASN1_STRING_get_length() instead as
recommended in official doc
https://docs.openssl.org/4.1/man7/ossl-guide-migration/#asn1_string-values-have-never-been-nul-byte-terminated

(cherry picked from commit 3678f39)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants