Topic: PHP 7 test with OpenSSL_Applink

[Steffen]

In discussion with the PHP team:

Several ext/openssl functions require the inclusion of the applink shim as documented in the OpenSSL FAQ to properly work on Windows. The applink shim is already integrated with all the PHP executables from the official distribution starting with 7.0.0 beta1.

Th Applink shim sould also be in httpd.exe.


Maybe you can test/verify it with with script at http://apaste.info/3Mb

All was fine with the shim, test builds removed

Thanks,

Steffen

[Jan-E]

I had already seen Anatol's commit to php-master and was wondering which functions required the inclusion of the applink shim. There was no reference to a bug-report in the commit.

Have you got a clue what goes wrong without the OpenSSL Applink?

[Steffen]

The above script crashes httpd without the Applink shim, according Anatol.

[weltling]

Steffen,

thanks for the announcement. Yeah, now it turned out, that the SPKI functionality in PHP requires this shim to be in. The functionality is available since PHP 5.6 and coupled with Apache could result an unexpected process exit without the solution mentioned in the OpenSSL FAQ compiled in.

Jan, as you're doing your own builds, you probably see one or two SPKI related tests failing on CLI. They should not fail with the latest master thanks to the solution offered in the OpenSSL FAQ.

Besides the thing described, integrating the shim can be useful for better OpenSSL version compatibility. Still, in PHP it's master, and we might port it into 5.6 some when.

But by the times, I would encourage everyone to test the PHP7 builds regarding the Steffen's change. While doing zero harm, it makes OpenSSL usage with Apache under Windows much safer.

Thanks.

[Jan-E]

I ran into a missing Applink sooner than expected. I was trying to compile Openssl 1.0.2d FIPS and got this during the building process: